Any one running their own mail server? I've just received a copy of Run Your Own Mail Server by @mwl
I can't wait to try it out and see how it goes. I hope it will be a lot of fun! Hopefully not too many troubles
I'm currently using Proton services with my own custom domain.
#ryoms

After much waffling and mucking, I finally have a functional mail server.

Still a few more things to finish up, but it's coming along. Even with #RYOMS, it can be quite the process. I tried testing out some of the AIO solutions, but kept running into trouble with those as well. Between the book and the LinuxBabe tutorials, things have been working well, if a bit time consuming.

@mwl dear sir, is there an errata for #ryoms ? I recently struggled getting the submission service up, the book recommended "smtpds" and "smtpd_tls_wrappermode" but on postfix-pgsql 3.9.1 (fbsd 14.2 pkgs) I had to use "submission" and no tls wrappermode to get any client besides openssl/curl to work. Nonetheless, thanks for the book, it's been a good fun putting it in practice.

Seeing quite a few people get bit by spamhaus blocking more shared resolvers today. It seems to not just be Hetzner addresses.

If you're having trouble with all your email rejected you too may be seeing the same issue.

My server is seemingly unaffected because I'm running my own recursive resolver (thanks to the Run Your Own Mail Server advice from @mwl) but I'm going to continue to monitor.

Since I'm currently reading #RunYourOwnMailServer #RYOMS, the part about #DKIM reminded me about something I heard some time ago, and I managed to find it again. Concept somewhat similar to what #OTR does.
https://blog.cryptographyengineering.com/2020/11/16/ok-google-please-publish-your-dkim-secret-keys/
https://rya.nc/dkim-privates.html

With greetings and thanks to @mwl and @ryanc

Sometimes you've been doing things a certain way for literal decades and all it takes an offhand comment to change your thinking.

In this case it's not even so spectacularly novel, just (I think even 2 separate) people stating they'd want to run their own mail server just for receiving important (e.g. 2FA) mails, not for sending or normal conversation. This was in the context of #ryoms - so everything else aside, just getting into discussions about some piece of tech (a type/role, not a specific software) can be useful.

"Cleverness leads to fragility. Fragility leads to phone calls. Phone calls lead to suffering."
#RYOMS

I'm reading #RunYourOwnMailServer #RYOMS by @mwl , and I'm thinking about what I know so far about #stalwart https://stalw.art/, and I can't figure what his opinion of it would be, I can see it going either way
- "oh, nice, don't need to need with all those separate things and making them talk to each other"
- "eh, if it works for you, cool, I already have mine "
- "this abomination doesn't even follow Unix philosophy, I wonder what else it does wrong - no, I don't want to know"

my #homelab has downsized a lot over the last decade, going from a giant ATX tower with KMS etc etc, to much smaller truenas box with a single vm. lately, though, i've been feeling the itch to roll out local services again.

set up flatnotes (github.com/Dullage/flatnotes) to handle random note-taking in my preferred format. hoping to setup a local wikipedia mirror ... just in case. #RYOMS is also sitting nearby, so there's always that to try for fun.

Hm, #selfhosting mail is still quite painful, and although @mwl covers all bases with #RYOMS I don't know whether I will be able to get the "reputation" to be able to use my own mail server.

However, I realized, I mostly want to be able to receive mail on my own server. This is crucial because mail is a very cursed weak link for authentication and in many cases, access to my mail means access to my account. And this would be my mail provider as well as state actors. In order to mitigate this, hosting my own MTA should suffice.

Sending mail is the thing that's actually difficult but also not needed to secure for my threat model. Mails that I am sending will likely end up on a cloud server anyway and I also simply can take care to just not depend on it being private against state actors/the hoster.

I hope to switch to a static IP here soon-ish and that actually sounds like a workable setup...

@mwl This weekend I finally had time to read large chunks of #ryoms (I backed the ebook version), it's great and I learned a thing or two I have to tweak. Thanks for writing it.

Someone on here suggested a smaller green energy powered VPS host to get away from #Hetzner I cannot remember if it was a #GoToSocial post or a #RYOMS / #HomeLab post and cannot seem to locate anything now.

Who has a good VPS host recommendation?

​

If I was bitter and cynical, I would thank Proton for helping sell #ryoms.

But Proton joining Team White Supremacy is gonna hurt a whole bunch of folks.

I want to encourage folks to run their own email. But it's an advanced skill. You gotta know sysadmin, DNS, TLS, etc, before you can try it. Not everyone's there.