Comment by lormayna

6 months ago

I am self-hosting my email. It's a pain in the ass, but software like mox[1] help on keeping things easier. The most tedious part is to setup correctly SPF, DKIM and DMARC and ensure that your IP will be whitelisted.

[1] https://www.xmox.nl/

I was looking recently and it seems there is something new that appears extremely easy to use on the surface: stalwart[0].

Not an endorsement as I haven’t actually tried it myself.

[0]: https://stalw.art/

How do you protect your server? Any guides there?

  • I have a FW provided by my provider, but I am not enforcing it too much.

    For SSH access, I have fail2ban + access only via certificates. For the rest, I have disabled web access and APIs as I don't need them.

    I also keep an eye on logs, but there is not too much there, besides some bots scanning for open relays