Homelab

No.

I would say absolutely not.

I heard that it is a thing you most likely do not want to have set up

Everyone should at least give it a try, if only so your decision not to is well informed instead of following cargo cult advice.

If you're planning to run for political office, I'd recommend against it. /s

Depends. I have my private mail system working and for the most part it works fine. However, its indeed a bitch to deal with blacklists and ISP policies. Took me two years to convince the ISP to give me a business line with two IP addresses and no port filtering. The mail system has to be configured correctly.

Knowing I have full control over everything is great, but its not for everybody.

I run three of them now, one since about 2005 and haven't had any blocking issues on it. I have also always set up DNS records as well as had a static IP.

Is there a docker container mail gateway I just need to send mail from monitoring app

Go for it for fun, but understand that FEW EMAILS WILL GET DELIVERED.

It’s nearly impossible to develop a good IP reputation, and Microsoft and other mega-email-providers will deliver all your mail to junk.

The biggest problem you'll run into is sending email from your residential internet connection. Most, if not all, residential ISPs either 100% block or severely throttle port 25 outbound traffic to cut down on spam. Even if you're able to find an ISP that doesn't block 25 outbound, if the reverse zone lookup indicates that it's a residential ISP most spam filtering solutions are going to flag all of your messages as spam.

In 2023 the threats to mail servers are so plentiful and ever changing, it’s the thing every business should give up — let the army of security pros at Microsoft and Google worry about those, honestly. Use the economies of scale of what they do protects millions of mailboxes, instead of you having to do all that same effort of work to protect 5 mailboxes.

The only issue hosting your own non-bisiness mail server is that a lot of internet providers block incoming port 25, so you may not be able to recieve incoming mail. Getting a reverse DNS setup may be an issue as well which will bring your mail score down.... But you can increase the score with SPF and DKIM implementation.

Just make sure that you secure your server from unauthorized relay or you'll be blacklisted in no time.

Nay, emphatically. Out of the box, a new SMTP server is treated by peers as yet another spam delivery vehicle. You have to prove to the world you're not a fly-by-night spammer. There are certain things you have to do with your domain's MX record, as well as in terms of SMTP server configuration. Oh, and if you're ever caught with an open relay on port 25, that will get you blacklisted instantaneously...

For yourself as an experiment sure, but don't fuck around with your family's email.

As a fun project, yes.

As an actual day2day email, no.

Unless u have actual redundancy with 24/7 uptime and static IP, it may caused missed emails. Even if u do, the price is a factor u may need to consider.

There are a lot of things that are fun to lab. Email is not one of them, seriously— leave this to a cloud provider.

The day Exchange stopped being one of the things I had to manage was a good day indeed 😅

See docker-mailserver which is a full fledged email solution including spam assassin and anti virus. I use it for my business emails. Works perfectly

have been running my own mail server(s) since early 2000. If Hillary can, you can :)

but of course there are downsides as well, you need to expose services from the outside, you need to allow SNMP inbound, you need to deal with DNS and various mail security enhancements, deal with anti-spam and do mailware/virus scanning etc. on top of that you would need to consider some kind of "high" availability. if your server goes down = no emails..

for me its worth it, my exchange server have been running for the last 10 years or so, I publish both webmail and use the outlook and/or mail in my phone.

I have multiple domain (10+) and run my own DNS.

The only thing I can't do is send emails.... I have to rely on my ISP for outgoing emails, but that's a good thing as generally my emails are not marked as spam as they comes from a trusted source.

As other said. If you want to see if you can. Yes fun go for it.

Don’t use it for anything important. And know that your ISP will very likely have that port blocked already. And if you call them to ask them to unblock it they are unlikely to be willing to.

This is to prevent scammers and spammers.

Also. Know that even if you were able to. Getting other mail servers to not instantly junk your mail is actually quite difficult or impossible. So your emails would always land in spam, be outright blocked, or be in junk.

Nope. Spam mail

Doing it for the experience and lab of it? Sure.

Doing it to actually use, fuck no. Email is the most vulnerable part of any org. You need to have a proper spam filter, dmz, web domain, several DNS records, certificates etc in order for mail to even flow in and out. It'll just be a headache and there are so many free options.

If you want your own special email domain, get suite for 1 person at 12 bucks a month and have it all just work.

My first IT job was as mail admin.

I wouldn't wish that shit on anybody.

After trials and errors, I find it good to work on as a hobby project / just for fun, but not for your day to day emails. In my case, my SMTP server literally only runs for my printer that has a scan-to-email feature on it, wouldn’t trust it for anymore than that

I have an Exchange vm setup the last 3-4 years now. I use smtp2go for outgoing email. Works really well. I primarily use the system for alerts emails and mailing lists I use. If it breaks its an annoyance but nothing critical. I have a mail filter in front that all incoming mail goes through.

Always fun to do if learning but in production even for personal i would recommend you pay for something like startmail or mailfence and use their custom domain features.

i learned exchange on my own and even had dreams of doing multi tenant exchange until exchange online came and jerked off all over that dream

You can easily host for receiving mail, but don't bother for sending. Most email services will simply mark your email as spam.

setting up email is easy, configuring it so you don't get caught in spam filters, and you don't get a ton is a full time job. I did it for awhile and just didn't find it worthwhile any longer.

https://youtu.be/eHxVvqzEtmc?si=BU6TYxt3cxl9yxdW

It's like this

Everything looks good, and wonderful but there's always a surprise waiting for your.

Coming from an exchange engineer with over 11+years experience

Honestly it's fun and all but I wouldn't recommend for anything work related. If I were to run a mail server at home I'd make sure I get a mail gateway you can proxy your mail through that manages blacklists and reputation.

I keep seeing these posts and have a question, is it possible to host an internal only email so I can get notifications from pfsense or truenas scale?

Been hosting my own email for over 20yrs. Get a vps at some reputable hoster, and make this a dedicated mailserver. Be sure to setup all dns records that are required, and rollout antispam measures.

Waste of time, massive headache, constant security threat. Set a relay up for outbound so you can get consolidated root mails and system alerts. But skip the inbound and let Apple/Google/someone else manage the threat surface.

I've run my own mailserver for about 20 years. I don't know if I'd recommend others do the same, but I wouldn't recommend against it either.

Once it's up and running, it's surprisingly low-friction. I have a VPS with a provider I trust, and it's running nothing else. Other than keeping everything updated, it requires very little ongoing maintenance. Mostly making sure you keep up with dmarc, TLS, etc best practices before the big providers call them requirements, instead of after.

I think the real difficulty is starting fresh, greenfield. Not only can one misconfiguration ruin your day, but if it's an issue that other providers notice, the smell hangs around for a long time. Most the big providers (gmail, microsoft, yahoo) will do absolutely nothing to work with you, so if they take a dislike to you - well you're screwed. There's no way to get in touch with them, no way to ask them to look again, etc. The juggernauts will usually give the impression they don't actually have anyone working for them at all.

You'll also learn a lot more about DNS. Whether you like it or not :)

Things that aren't so fun .. OS updates are always the terrifying one. My provider is really good about letting you spin up a new instance while keeping the old one around for a month so you can switchover when you're ready. I use that for most things - but for my mailserver, I don't want to because I don't want a new IP. I like that it's my ball and I can pick it up and go play somewhere else if I want, but the amount of reputation that the big providers pin to IP, makes this a lot more difficult than it sounds.

The other fun sticking point is monitoring. I get emails if my mailserver (or DNS) go down .. but because my mailserver is down, I don't receive them until it's back. That's not ideal, but I never seem to get around to doing anything about it. (because when it's working, I want to leave it alone. When it's not working, it's too late.)

I think the main thing to keep in mind is that it's difficult to "lab" outbound mail. There's very little "just trying something", very little experimentation, etc. Getting things wrong has too many long-term effects. You wanted to try a new MTA and now Google think you're a spammer? Putting the old one back does not fix your reputation. Putting the old config back does not fix your reputation. Doesn't matter how much you clean, that smell is going to take a long time to go away.

I have my own mail server for using some of the service that requires mailing to my own domain.

It needs a static ip for best, which I have. But I’m currently lacking Ptr( if I named right, just a dns thing to do reverse checking) due to I’m not using business line and my isp doesn’t provide the service for home users.

Having one is great, but don’t use it as your main email service.

If you have a home lab you've probably got devices that sent e-mail alerts so you could try running something internally to see how you get on.

I think some older devices don't have authentication and can only work internally.

"is it recommended" implies that the wisdom of crowds (a) exists, b) applies, c) is correct.

What do YOU want to do? That's all that matters.

I've run my own mail server for over 20 years. I enjoy it, and its nice having my mail sit in my basement.

I'm running my own mailserver on a VPS for about 4 years. I'm using https://mailinabox.email/ It's a one command installer that installs everything you need for a mailserver to run, including roundcube webmail, nextcloud, DNS server, static html page hosting, and it runs on low resources, I'm using a very cheap VPS server with 1 core and 1GB RAM, I pay 3.79 euros monthly for VPS and it's been running great.

I have an O365 instance hosting my own domain for mail

Isn't this question asked on this forum every few months? It's easily searchable.

I have been an email administrator and I run my own, personal email server for about the last 4 years. I've administrated Microsoft Exchange, on-premise and online and GNU/Linux Postfix/Dovecot/SoGo. I prefer the open source email offerings to the M$ stuff.

As others have mentioned, email is something that you would probably want hosted in a cloud somewhere and definitely NOT running locally at home (most ISPs block port 25 anyways so, running a email server at home is a crazy challenge). A free-tier cloud somewhere should be enough to get you started with an open source email server. The two cloud services that I use block port 25. I had to open a ticket with their support to open port 25. But, once that port is open, you can have a full fledged email server.

Check out https://www.iredmail.org/. It's open source, easy to get started, rock-solid, secure, and they have tech support via their web forum. ( I say 'they', but it's literally like one dude). This is what I use for my personal email server. I have custom IPS and Geo-IP filters for security. It's been running issue free for the past 3 1/2 years. I've never missed an email lol.

Use https://mxtoolbox.com/SuperTool.aspx for troubleshooting delivery issues. And, to learn all about the different DNS records a healthy email server needs.

Running an email server is challenging, but it's not something to be afraid of. It is labor intensive, requires active administration and not something that you would want to simply "set and forget". But, with the right administration, running your own email server can be very rewarding.