1–10 of 17 posts
What distro would you use?
What sort of disks would you select?
And how about the in/out email stack itself? What's the most performant/consistent/private way to run your own SMTP and IMAP servers?
Linode, for example, has upgraded me in memory, space and bandwidth at least twice, and recently did a hardware upgrade. Not that you have to go with Linode specifically, just, when will you ever give yourself a free upgrade on your home hardware?
I run my own mail server on Linode. Dovecot+Postfix+Spamassassin. It works really well and you can enable TLS/SSL encryption on all protocols.
I like to decouple email storage from my email client, so I can switch clients at will as long as they support IMAP.
finally, rack mounted stuff would be too noisy to be let into a home.. since its a 'home' mail server, there'd be barely any load.. you can probably add it to your existing htpc or something without issue...
I'd probably use CentOS 6 (avoiding systemd) with full disk encryption, and either a RAID10 of some good-performing normal disks, or RAID1 of SSDs.
I'd put a backup MX on a VPS somewhere, preferably in a different location to act as a store-and-forward to my main MX. This one will need to have a copy of the user map to avoid the "accept any" backscatter problem backup MXes have.
Postfix as the mail server; Dovecot for IMAP. Make sure it uses Maildir for storage (unless you're going SQL) as mbox is a horrible format that needs to die. Use SpamAssassin, and reject any mail from IPs listed on Spamhaus.
Truthfully though, I use a server in a datacentre for a reason - because home connections just aren't reliable enough and the ISPs can't be trusted (I can make sure I only send mail over TLS, but not that other people will only send their inbound mail into my server over TLS), and I wouldn't trust a consumer ISP not to suddenly try some kind of fuckery like blocking SMTP ports. Linode would get my recommendation, they are great value, have good performance for a cheapish VPS, and great uptime.
As others have said, a 'clean' IP seems quite important. I've had emails disappear into Google's spam filters despite working previously, as reported by many here[0].
Was tempted by Virtualmin but went with the manual config in the end. Am receiving multiple domains on one server, so it has been a learning curve. Not convinced I've 'learned' a great deal particularly. At least a slightly clearer understanding of the moving parts involved. That's Postfix, Dovecot and Spamassassin, btw. All served over SSL/TLS only, i.e. only IMAPS is enabled in Dovecot.
Tempted to start encrypting all mail as it arrives on the server with GPG, as per Mike Cardwell's advice[1], although I'd have to use mailgate[2,3] with Postfix instead of Mike's Perl script for Exim. I'm also not sure how that would work with search, spam and such. Perhaps it's better to delete mail regularly, saving any files and details needed locally.
Had a slight edge-case issue arise recently - my phone battery died and I didn't have my machine so my mail was inaccessible until home. I've refrained from enabling webmail and think I'll keep it that way for now. Just make sure I have 'a device' with the credentials saved on it on my person when required.
--
[0] https://news.ycombinator.com/item?id=9150927
[1] https://grepular.com/Automatically_Encrypting_all_Incoming_E...