On Wed, Feb 23, 2022 at 01:19:47PM -0500, John Levine via mailop wrote:
> It appears that Sinclair, John via mailop <jsincl...@mspca.org> said:
> > I have the hardware and the bandwidth, ...
> 
> More importantly, do you have a static IP with matching forward and reverse 
> DNS that
> is not in the PBL or otherwise policy blocked for sending mail?
> 
> By the time you go through all the hassle of managing spam filters and 
> getting your
> IP warmed up, Fastmail at $50/yr/mailbox looks pretty attractive.
> 
> If you can find someone who resells Tucows' white label e-mail, they have a 
> pretty
> good product for about $10/mailbox/yr for 5GB, $20 for 10GB, $30 for 15GB.
> 
> R's,
> John

I've run my own mailserver at home, usually on a dynamic IP, for over 25
years now. Started with qmail (Hi John), now postfix / dovecot and
letsencrypt for the certs.

It's definitely gotten more difficult to successfully do this of late,
but I've a solid system now. Might not be what anyone wants or needs,
but who knows, if it helps someone...

Local server in the house (dell r720xd - too big, but heh)
- Custom domains for me and all family members (this is usually what stops
  me hosting on another provider).
- Obviously as much disk as I want to throw at it.
- Connected to my DSL provider using a dynamic IP.
- Letsencrypt generates the certs

VPS on OVH (usually this is a bad idea, but actually this step isn't
necessary)
- Runs postfix, and a dyndns server
- Local server has a cron job to contact this vps to inform it 'this is
  my IP' and 'here is my certificate fingerprint'
- Server also runs a firewall and only allows this dynamic IP to talk to
  it and the internet facing mail service.
- None of this bit is strictly necessary - except a dynamic dns service
  (and you'd need to use SMTP Auth config from LocalServer to ESP)

3rd Party Email security provider - using Proofpoint Essentials*
- *disclaimer - I work for them, 3rd party/partner resellers do resell
  it pretty cheaply
- MX for my domains goes to Essentials, Inbound traffic is sent to my
  interim VPS
- Outbound email is received from the VPS and Essentials takes care of
  deliverability out to everyone else.

The VPS middle layer isn't really necessary - I just prefer it as it
means I've a buffer in case Proofpoint caches the DNS a little too long
and I can use it to validate the cert on the local server when it
connects (should my dynamic IP change and I don't send my email to some
rando).

So I concur with John... it is perfectly possible to host yourself if
you can get past things like 'dialup rbls' and other poor reputation
blocks.  It's often easier just to let established providers do that
bit.

PG
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to