Primary mailserver at home. Secondary MX in a VM at one of the services; it only stores mail if primary is down, otherwise relays immediately. Dovecot and Postfix, SpamAssassin and ClamAV; greylisting, SPF and DMARC but not DKIM. I handle mail for my family, some friends, and a few mailing lists.
What setup / config do you use for your secondary MX? I host my mailserver at home, and would love to have a backup, ideally one that I can view the mail for via ssh when my primary is down.
Ask HN: Do You Host Your Own Email?
101–110 of 209 posts
Re: Ask HN: Do You Host Your Own Email?
#102Yup, OpenBSD + OpenSMTPD off a wholesaleinternet dedicated box, for roughly a dozen domains. Previously, Postfix and/or qmail. If anyone's got any tips or contacts for getting off of Microsoft's (live.com, outlook.com, hotmail.com ,etc) blacklist, I'd be much obliged. Their webform for such matters goes nowhere, and postmaster@ goes unanswered. It apparently has to do with the ASN of my hosting provider, but I've bee…
Re: Ask HN: Do You Host Your Own Email?
#103I run my own email. I have my own physical servers, that I built and tested myself, that I'm colocating. They handle both incoming and outgoing, and I've been doing it for so long that there is no previous reputation for the IP addresses I use. In spite of how vehemently some people, Reddit's /r/sysadmin, as an example, want you to NOT host your own and use issues like deliverability as reasons, it's really not hard…
> your email isn't sitting unencrypted on a server that you don't control
This is valid if all the other parties that you send emails to self host their email servers as well. If you have your own self hosted mail server but you talk to gmail people then "your" emails are going to sit unencrypted on Google servers.
Re: Ask HN: Do You Host Your Own Email?
#104The best of all worlds is to use your own domain, and point it at a paid professional mail service. It is reliable, and you can easily switch services in the future without changing your email address.
and you still lost all of old email if you switch to another mail service right?
Re: Ask HN: Do You Host Your Own Email?
#105Primary mailserver at home. Secondary MX in a VM at one of the services; it only stores mail if primary is down, otherwise relays immediately. Dovecot and Postfix, SpamAssassin and ClamAV; greylisting, SPF and DMARC but not DKIM. I handle mail for my family, some friends, and a few mailing lists.
Do you have business class internet at home? I've always found that ports for SMTP are blocked on residential lines
Re: Ask HN: Do You Host Your Own Email?
#106Several domains, several aliases, but I'm intentionally the only user. Because if I would hand out aliases to people they'll inevitably start receiving some spam there, that then gets forwarded to the {hotmail, gmail, ...} that they're alased to, and when at those termini it can be subsequently marked as spam. I surmise that that could be bad for my mail server's reputation and that's why I don't hand out aliases. That's just caution. There's plenty signal for the top-10 mail hosters to tune their reputation heuristics to so that that wouldn't happen, but I don't trust that they worry enough to invest smarts in improving the general state of email delivery. The incentives are not there. They're the incumbents, and interoperable federated services were good news when they were starting up (whooo hey we bought Postini and now we're doing this web based office thing where you can send and receive email, come join us in the beta, free forever, promised!" aka GSuite), but now that they're incumbents it's better to stamp out those cooperative federated protocols. Before anyone gets any ideas that you could actually own your own data and and could communicate with people over the internet independently of some FAANG-size corp, you know.
Re: Ask HN: Do You Host Your Own Email?
#107Primary mailserver at home. Secondary MX in a VM at one of the services; it only stores mail if primary is down, otherwise relays immediately. Dovecot and Postfix, SpamAssassin and ClamAV; greylisting, SPF and DMARC but not DKIM. I handle mail for my family, some friends, and a few mailing lists.
What setup / config do you use for your secondary MX? I host my mailserver at home, and would love to have a backup, ideally one that I can view the mail for via ssh when my primary is down.
Look at the bit about "backup MX for a remote site".
The specific thing you are asking for, however, isn't a backup MX so much as a second delivery to a local mailspool, which is also doable now that you know what it's called.
Re: Ask HN: Do You Host Your Own Email?
#108I run my own email. I have my own physical servers, that I built and tested myself, that I'm colocating. They handle both incoming and outgoing, and I've been doing it for so long that there is no previous reputation for the IP addresses I use. In spite of how vehemently some people, Reddit's /r/sysadmin, as an example, want you to NOT host your own and use issues like deliverability as reasons, it's really not hard…
Which software are you using to push/receive emails on your own servers? > your email isn't sitting unencrypted on a server that you don't control This is valid if all the other parties that you send emails to self host their email servers as well. If you have your own self hosted mail server but you talk to gmail people then "your" emails are going to sit unencrypted on Google servers.
Still using sendmail ;)
> This is valid if all the other parties that you send emails to self host their email servers as well.
I used the word "sitting" deliberately. Of course we can't control the rest of the world's servers, and we can't even fully control those owned by others but rented to us, but we can control our own.
Re: Ask HN: Do You Host Your Own Email?
#109Re: Ask HN: Do You Host Your Own Email?
#110The headache is with people who want to do things which aren't in my "acceptable use" envelope. I know there are adversaries out there ranging from the simply venal and self-righteous to the outright evil. That ranges from spam to tracking to phishing to malware delivery; and from scanning for open relays to credential stuffing to SYN attacks and more.
I actively map and target adversary infrastructure (and sometimes the "friendlies" are useful idiots). I use and encourage the use of 1:1 email aliases (I wrote and support TruAlias). I mess with DNS; I mess with L2. So around here if something doesn't work, you'd better ask me or your designated contact if you're expecting it to. There is no privacy around DNS or netflow info on my network.
My support issues are largely people-driven / political, which shouldn't be surprising given the above. However overall the support and IR load is light and the most problematic and chronic interlopers are the self-entitled aaS providers themselves.