Follow

So how bad is the current situation of not being able to self host email? Supposedly, it's becoming harder to self-host because Gmail would blacklist entire IP ranges if a single server from said range is known for spam which supposedly makes it much harder to self host.

But I see a lot of people still self-hosting and saying that they don't have any problem. I like to do nslookups on various small business and organization websites and a lot of them still self-host (or use a VPS) with no problem.

I think that one article exaggerated the situation.

· · Web · 8 · 3 · 6
@xianc78 I've heard around here that it's unsustainable

I imagine if you never email anyone and only use it for sign up and such, it's probably no problems

@coolboymew I pretty much only use email for sign ups, but that may change soon. I only use Gmail if I am working for a company that uses it.

@xianc78 I finally stopped after ten years and migrating my last job's server away from self-hosting since 1996 because it became intolerable.
@Moon @xianc78 i did it for ~10 years and only stopped because i wanted better search, it always worked flawlessly for me out of the box (with mailinabox)
@lain @xianc78 an abbreviated version of my story is I had little problems with my company's email, then we were forced to a new IP range by our ISP and immediately spam became overwhelming and I was spending massive amounts of time writing spamassassin rules and still losing the battle.

On my personal server, from 2010 to 2020-ish, I had spam but it was tolerable, in the last couple years it got worse. And Google kept blocking my server so I could not communicate with gmail users. I would get unblocked after great effort trying to get hold of any human at Google (my settings were absolutely perfect) and eventually they would just block me again and I would have to start over.
@lain @xianc78 @Moon it's one of the few services i don't recommend selfhosting because deliverability is really hard to guarantee on VPSes, ISPs actively block SMTP ports, and it's that one service you REALLY want to have working out of all other selfhost services

i ended up moving to protonmail for all of my mail with multiple custom domains and i just tag emails based on what domain it came in on - happy medium between security and deliverability for me and if proton fucks up i can swing my MX records somewhere else

@Moon @7666 @lain I wouldn't trust FastMail. They seem shady.

digdeeper.club/articles/email.

Posteo.de seems like the best. It's paid, but it is 1 EUR per month and they even allow cash by mail. Disroot seems like a decent choice if you want a free provider, but the various backgrounds they use on their website give me Antifa vibes. They claim that anyone can use it regardless of ideology.

@xianc78

I would only admin an email server if I was paid to do so.

@xianc78 A lot of the bigger VPS’ will block the port for mail and only allow you to open it up after submitting a ticket, think a lot of it is pretty recent, e.g. DigitalOcean doing it in ~2021

@xianc78 I use my web hosting's email service instead of self hosting because even without the blacklisting issues, it's less hassle for something that's got pretty much no security to it anyway

@xianc78 I have experience with self-hosted email, ranging from small boxes to large scale outbound mail operations with hundreds of thousands of emails daily. IMO, people exaggerate the problems a bit. For the orgs that run self-hosted, as long as DKIM, SPF & DMARC are correctly configured with appropriate rDNS, and you didn't happen to get an IP previously used for hardcore spamming, it's a little bit of work upfront but I haven't had to do this constant work that people say it is. Maybe I have just had good luck, but this is even after moving IPs and providers multiple times. I even had servers running on OVH which I know now from spam mitigation work is responsible for a fair amount of it.

The main issues I've had is not with providers like Gmail & Outlook, it's more regional providers, small ISPs etc who have black box rejections and do not respond to any attempts to contact them. A notable example is Comcast, who blocked one domain I'm assuming purely based on its TLD (it had never sent email to them before), and I still have not managed to resolve that situation. This is with a domain hosted on Google Workspace! So no, even those services are not infallible.

But it is completely valid to use a hosted service because not everyone has the expertise or resources to make their systems redundant, secure, usable, etc. And in fact, for personal accounts with possibly critical communication, I do not use self-hosted services for that because I like to err on the side of caution. But to my knowledge, I have never missed any communication on the self-hosted boxes.
I use Linodes, with an IPv6 block which they will provide if you ask for them. Then I install YunoHost, and if you host your own DNS (I use BIND9 managed via Webmin) you can configure your DNSSEC and YunoHost going to generate the default DNS records for you (including DKIM, SPF, DMARC). Then all you need to do is update your BIND9, and you have a fully RFC-compliant service stack for email.

I have zero issues hosting my own email for years, for at least since 2021 January (that's my oldest YunoHost still on Debian 10).
It all depends on the ISP. Linode is the best, as it allows setting the rDNS to both IPv4 and IPv6. Even Spamhaus documents this, and recommends small instances to use their own block to avoid being blacklisted on shared IP.

Another issue is that people do not realize or chose not to respect the fact that "email" is a service stack. A properly configured DNS server is essential to all service stacks, so IF you chose to host your own I would recommend to host your own authoritative as well.

If there was no YunoHost I would not bother hosting my own email, I admit that. I used many stacks before, including Virtualmin and iRedMail, and they required far more effort to get them to full compliance. With YunoHost and your own DNS - it takes less than 60 minutes from a new VPS to a fully-configured server. I cannot praise YunoHost enough for that.
@FourOh-LLC @xianc78 Interesting, I've never heard of YunoHost before, though I haven't messed with full stack type solutions in a minute. When I first started out years ago I used ISPConfig when I didn't know anything about digging into Linux.
I keep my TLDs at Gandi (good support for DNSSEC), I use Linode and OVH for the VPS, I use Webmin to manage 3x VPS for DNS, and the rest are YunoHosts. This is the best combination I know of, and I use this for years. I am not a UNIX root or a programmer, I appreciate all the GUIs and barely any work needed at the shell.
@xianc78 I generally use mail to receive, not send. And when I send, it's typically as a reply. They seem to let those through easier. I also read that building up a good reputation helps by sending mails who get market as not spam. I have the impression this indeed helped on MS for the domain I tried this with (never bothered with others).

@xianc78 My experience is it’s nice to do - however the amount of spam is unreal! Even using the likes of Spamhaus it still lets through some dangerous emails. I used to use squirrelmail, roundcube, Zimbra with various mtas until about 7 years ago. For ease of other users I switched to ms365 - it just works. One less headache. I don’t like MS but somethings just are worth paying for. Saves me time and money.

Sign in to participate in the conversation
Game Liberty Mastodon

Mainly gaming/nerd instance for people who value free speech. Everyone is welcome.