frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Self-host your mail server

https://blog.haschek.at/2026/you-should-selfhost-your-mail.html
39•geek_at•1d ago

Comments

carlosjobim•1d ago
I disagree with the author. If you have your own domain for e-mail, then you've already dealt with all risks and vulnerabilities. Of course you have your e-mail stored locally as well by using an e-mail client, which you would anyway.
geek_at•1d ago
Sorry the title should have been "You should self-host your mail server" but it seems HN removes the "You should" in the beginning of a title.

I wanted to start this discussion because I think we are prime for more self hosted mail servers in 2026 and in the post I explain how to use a locally hosted LLM to nudge the spam detector rspamd to whether or not an incoming mail is spam.

Also in times where the EU can order your mail providers to scan for unwanted content [1] (currently limited to CSAM, later probably more) it does feel better to have your data at your hand.

[1] https://en.philenews.com/international/privacy-to-end-in-the...

throw0101d•51m ago
> But there are other solutions out there like: Stalwart; Mailcow ;Or if you're a purist you can set up your whole server yourself

Another good guide that uses Debian and its standard packages:

* https://workaround.org/ispmail-trixie

(Updated with every release, and upgrade/migration instructions.)

dangerboysteve•25m ago
Some out of the box solutions.

https://www.iredmail.org

https://mailinabox.email/

muppetman•50m ago
I do. It's nowhere as hard as everyone on here makes it out to be. And I don't even use an easy solution like Mailcow. Spam is a solved problem with rspamd, and it's not even an llm
selectodude•46m ago
It’s not hard to receive or filter mail - knowing that somebody will receive your email after you send it is another thing entirely.
muppetman•42m ago
Thankfully not a problem we've encountered yet. All my mail is DKIM signed, SPF aligned etc. I also registered on dnswl.org which is a signal quite a few people seem to use.
9dev•41m ago
That is the exact problem that got me to abandon my splendidly working, self-hosted email stack. I had so many instances of mail just not getting delivered, despite doing absolutely everything correctly, that I gave up.
john_strinlai•38m ago
out of curiosity, are you talking about personal, small business, or corporate?

"spam is solved" looks a lot different at each of those

muppetman•23m ago
Personal mailserver sorry. rspamd stops all the sent-using-my-from-address "i hacked you" emails (DMARC drops them) and all the other random spam stuff. I can imagine though a large business with thousands of email accounts it wouldn't be as easy though.
LoganDark•39m ago
I've tried self-hosting my mail server, but that means all my outgoing mail will go to Spam on all providers that use reputation-based filtering. In all cases I had SPF, DKIM and DMARC working perfectly, PTR records, etc. but it just doesn't matter. Even a Fastmail domain goes right to spam on my personal account, and they are very very established. It's just not worth it.
dwedge•25m ago
I use a dedicated server and a vps for this, so I get around the residential IP reputation issue. The rest of the problems with deliverability are overblown. In 15 years of doing it on multiple servers, I've had one 2 month period where Gmail was spamming me and one month where Yahoo spammed me. In both cases it stopped without me changing anything, I've always suspected it's brief periods of anti-competition attempts which don't last forever
LoganDark•23m ago
I never used residential IPs. Most ISPs don't even let you set PTR records on those. My problem was that any server at practically any provider would reuse an IP that many previous customers have used to send spam in the past. For example you can't hope to send mail from a DigitalOcean IPv4 address without going to spam. Nor from Kamatera. There are probably a few more providers that are basically blackholed because they're so often used for spam. (I don't have experience with providers that don't offer IPv4.) I believe some providers even attempt to block outgoing mail.
throw0101d•39m ago
Waiting for a submission of "You should run your own NNTP server" (lots of 'nostalgia' for web forums to come back, so why not this too?).
ubermonkey•33m ago
Counterpoint: No.
dangerboysteve•28m ago
What hosting / VPS companies do you recommend? Finding one which allows you to run a mail server is some work.
hkt•15m ago
Mythic beasts. Their IP ranges are pretty clean and well managed. My deliverability has been fine there for years.
comrade1234•27m ago
Ive self-hosted my email server since 1999. It started in a closet at home in San Francisco. As things got more restrictive (residential ips being black holes) I moved to a Colo. but now I'm back to hosting it on my server in my cellar. I have a fixed ip from my provider init7 (Switzerland) that has never been blacklisted. Reverse dns is set up. All the acronyms like spf, dkim, dmarc are set up. I have no problems sending to Microsoft and Google email addresses.

So I'm doing it now but I'm ready to switch back to one of my Colo servers at any time and I won't be surprised if I have to at some point.

mmh0000•25m ago
I ran my own self-hosted email server from 2008-ish to 2018, and I would highly recommend against doing it! Especially when Fastmail and Proton are so cheap.

I was running Postfix+Dovecot+Seive+SpamAssassin+Fail2ban+certbot+spf+dkim+reverse-ip+<other random crap>

It worked! Receiving email was overall pretty easy. I know I also did things the "hard way" by ad-hoccing all that together, and today there are a lot more out-of-the-box solutions that do all that for you. But still. Being a full-time email administrator is a job I will never do again unless I'm getting paid for it.

You know what really sucked? Deliverability. Frequently, emails I would send would just ... vanish ... no warnings, no errors, no failures. From my end, everything was perfect. Until days later, people would follow up with me and say, "Are you going to send that email?" ...

I had a business IP (Comcast Business). The IP address was clean, not black listed anywhere, not on SORBS or other lists. Still, successfully delivering an email was like 50/50, with no way to confirm the other party actually got it.

noncoml•24m ago
Good luck having your emails hitting any inbox instead of ending up in spam.
bad_username•18m ago
Ending up in spam is not that bad, compared to emails simply dropped silently, without either party having any idea.
vouaobrasil•20m ago
Man these days it's nearly impossible. Even my web host has trouble hosting email, even though I use it and they do a decent job. Only medium-sized specialist companies and large ones like Gmail do it well. It's just those spammers - we could have nice things like self-hosted email if everyone were nice, but we can't.
hkt•20m ago
I've been self hosting since 2012 or so and it is a mixed bag. Deliverability is fine provided you're on a clean IP range, which generally only reputable hosts have.

There was a moment when my son was born and he was in NICU that my mail broke. I just went without for a while. Not ideal.

Since then I've thought: self hosting is nice but hosting cooperatively is probably the best way forward. Democratic control might beat technical control. I'll do it soon, I think: I'd be fascinated to know what people think.

selfsimilar•8m ago
I’m very interested in this approach. I’ve hosted friends’ websites for decades but I’ve been the single-point of failure, so “cooperative” is very enticing.

I’m currently working on a cooperative “lights-on” solution which might be complementary.

kimovski•12m ago
Blast from the past:

https://en.wikipedia.org/wiki/Hillary_Clinton_email_controve...

dandersch•9m ago
Before self-hosting your own, first get a domain and just point it at a mail provider that allows custom domains. It will cost, but so will a VPS. I suspect a lot of DIY homelab types would have most of their needs met with just that setup:

- you get the vanity email address

- you can switch email providers (including self-hosting later on)

- you can have ~unlimited aliases (depends on the provider)

Most of the setup consists of steps you will have to take anyway when self-hosting (getting a domain, changing DNS records), except for a major amount of headaches that will be taken care of for you.

tossitawayplz•3m ago
Michael W Lucas has a book[0] on the subject too: https://mwl.io/static/books/run-your-own-mail-server.html

Claude Opus 5

https://www.anthropic.com/news/claude-opus-5
760•alvis•2h ago•429 comments

Nvidia, Microsoft, Meta warn against overregulating open-weight models

https://www.cnbc.com/2026/07/24/nvidia-microsoft-meta-open-weight-ai-models.html
188•louiereederson•6h ago•125 comments

Postgres LISTEN/NOTIFY actually scales

https://www.dbos.dev/blog/postgres-listen-notify-scalability
24•KraftyOne•28m ago•2 comments

My security camera shipped a GitHub admin token in its login page

https://hhh.hn/hanwha-github-token/
403•hhh•7h ago•150 comments

India's first privately-developed rocket reaches orbit on dramatic debut launch

https://arstechnica.com/space/2026/07/indias-first-privately-developed-rocket-reaches-orbit-on-dr...
357•sohkamyung•4d ago•102 comments

Self-host your mail server

https://blog.haschek.at/2026/you-should-selfhost-your-mail.html
39•geek_at•1d ago•30 comments

Fil-C: Garbage In, Memory Safety Out [video]

https://www.youtube.com/watch?v=5F-2Y1LPRek
26•Bootvis•23h ago•15 comments

I got into YC by hacking it

https://obaid.wtf/jotbook/2026/07/18/how-i-got-into-yc-by-hacking-it.html
59•speckx•1h ago•32 comments

Half-Life 2 running natively on HaikuOS

https://discuss.haiku-os.org/t/haiku-nvidia-porting-nvidia-driver-for-turing-gpus/16520?page=18
198•m0do1•6h ago•30 comments

Don't Take the Black Pill [video]

https://www.youtube.com/watch?v=zLZwpH5lCD4
29•signa11•2h ago•10 comments

Be skeptical of OpenAI's rogue hacker agent story

https://www.theguardian.com/technology/2026/jul/24/openai-rogue-hacker
242•rwmj•3h ago•98 comments

The hardest way to make a GIF

https://blog.willgrant.org/2026/07/23/the-hardest-way-to-make-gif.html
25•plaguna•12h ago•5 comments

Gsxui – Shadcn-style components for Go

https://ui.gsxhq.dev/
15•jackielii•1h ago•0 comments

Extending Polars with Rust Expression Plugins

https://fenic.ai/blog/extending-polars-with-rust-expression-plugins
24•cpard•2d ago•0 comments

The front end framework for correctness: built on Effect, architected like Elm

https://foldkit.dev/
56•plucafs•4h ago•29 comments

DuckPGQ – A DuckDB community extension for graph workloads

https://duckpgq.org/
26•rzk•2h ago•4 comments

The rise and fall of language diversity through the Holocene

https://www.science.org/doi/10.1126/science.adx4343
40•delichon•2h ago•2 comments

It's getting harder to focus every day

https://glyphack.com/attention/
623•peykar•11h ago•351 comments

Flux 3 X Mimic: The Next Generation of Video-Action Models

https://bfl.ai/blog/flux-3-mimic
289•kensai•10h ago•47 comments

The small, real, original web

https://spacetimetech.wordpress.com/2026/07/19/the-small-real-original-web/
15•speckx•2h ago•0 comments

Flux 3

https://bfl.ai/blog/flux-3
530•ThouYS•13h ago•125 comments

Unitree As2-W

https://www.unitree.com/As2-W/
44•MehrdadKhnzd•3h ago•16 comments

JEP 541: Deprecate the macOS/x64 Port for Removal

https://openjdk.org/jeps/541
86•pmg1991•2h ago•80 comments

Reporting Web 3D Capabilities on a Budget of $3 a Month

https://ben3d.ca/blog/reporting-web-3d-capabilities-on-a-budget
7•bhouston•4d ago•0 comments

Em dashes are amazing

https://psychotechnology.substack.com/p/em-dashes-are-fucking-amazing
290•surprisetalk•6h ago•256 comments

Codeberg Divides

https://lucumr.pocoo.org/2026/7/24/codeberg-divides/
74•ashdnazg•4h ago•94 comments

Online Historical Encyclopaedia of Programming Languages

https://hopl.info/
17•gregsadetsky•2h ago•1 comments

BGP ORIGIN attribute manipulation and its impact on the Internet

https://blog.cloudflare.com/bgp-origin-attribute/
12•sbulaev•1h ago•0 comments

Latest Airbus single aisle aircraft innovations

https://www.airbus.com/en/newsroom/stories/2026-07-how-the-a321xlr-is-redefining-single-aisle-com...
40•r2sk5t•3d ago•62 comments

Making Xen's dom0 I/O path NUMA aware

https://edera.dev/stories/numa-part-4-closing-the-xen-dom0-i-o-gap
23•virtio_vixen•2d ago•4 comments