News for hackers. Stuff that matters.
Re:How to Run Your Own Mail Server (2017) by _jal on Friday January 26, 2018 @02:20PM (#16242070)
I'm in the same boat - been running my own mail since the 90s. I could understand complaints about lots of weird hoops to jump through to get mail from your server accepted elsewhere - that has become harder over time[1] - but there's a very short list of things that need to be done to avoid being hijacked.

Mail server setup for the uninitiated does look a little daunting, especially if you're more accustomed to "all-in-one"-ish software. If you want to do this, I recommend starting with making sure you have a clear mental model of mail server architecture, especially where it touches other things (DNS, DKIM, spam filters, local delivery, probably IMAP, maybe LDAP, maybe databases, etc.) Without a clear idea of the dataflow and reasons for different decision-points, you're going to have a very bad time troubleshooting things.

[1] SBCGlobal.net has been rejecting me for over a decade despite there being zero spam ever having been emitted by my domain. Eh, my userbase communicates with exactly one SBC user; ATT can bite me.

Re:How to Run Your Own Mail Server (2017) by burgerdev on Friday January 26, 2018 @06:03PM (#16243594)
I've been running my mail server for 6 years now. Mail to Microsoft's servers (live.com, etc.) keeps ending up in the spam folder, even though spf, dkim and dmarc are set up and my IP has been clean for the entire period. The bright side is that I only notice this in the rare case of "mail to all contacts", since noone is on outlook.com these days.
Re:How to Run Your Own Mail Server (2017) by cpncrunch on Friday January 26, 2018 @08:04PM (#16244216)
Yes, live.com is a problem for us too. It seems they silently blacklist ip addresses and make it very difficult to get off that blacklist. There's a thread here about it with some of us trying to figure out how to solve this problem:

https://answers.microsoft.com/en-us/outlook_com/forum/oemail...

But other than that, running my own mail server hasn't been much of an issue. Set up sendmail, use public blacklists for spam control, and it pretty much runs without any intervention.

Re:How to Run Your Own Mail Server (2017) by megous on Friday January 26, 2018 @09:03PM (#16244421)
Outlook.com/Microsoft blacklists entire subnets because there are spammers in the same IP range. It's ridiculously lazy practice. They should just block IP addresses that are actually sending SPAM. It's not like that's a problem technically. You can fit all IPv4 addresses into a 512MB database.

I'm thinking of solving it by blacklisting outlook.com domain, so that senders at least know that I can't respond to them. I can put a message in the error response, that will be reliably relayed to the sender by the sending system.

Google's slightly better. Recently I did an experiment and created a few gmail accounts and sent some riduculously spammy messages full of typical keywords in between those gmail accounts, and they were all successfully delivered. Always.

Then I sent e-mail from new gmail account to my email server and simply responded and it went to spam. It's ridiculous that such a simple heuristic like someone responding to a message gmail user sends doesn't get the message through spam filters, even though the system can clearly determine taht the message is legit based on many variables (References field referencing message-id of the original message (noone else than the recipient should know this), reply being from a correct source (DKIM/SPF), message having normal looking business content, etc.).

There's way too heavy a weight on sending server IP range reputation.

Re:How to Run Your Own Mail Server (2017) by cpncrunch on Friday January 26, 2018 @10:06PM (#16244619)
With gmail you can at least request that they unblock you, and they will do that. With live.com and icloud.com you have to spend inordinate amounts of time bouncing between useless support people before you get anywhere. gmail in general seems to have the best spam filter (lowest false positives and negatives).
Re:How to Run Your Own Mail Server (2017) by clan on Saturday January 27, 2018 @06:14AM (#16245763)
In my experience live.com was an easy fix.

But gmail was not. Even as a business user with support.

Gmail rejects me as an ugly spammer at the gate when using IPv6 but not when using IPv4.

My IP addresses are not listed in any public blacklists.

And the Borg hivemind is not able to tell me why. Gmail support is friendly but have no knowledge of their filter nor an escalation path.

The amusing part is they reject me as a bulk sender. But when I register into their bulk mailer program my volume is too low.

This is with strict SPF, DKIM, DMARC and registered with dnswl.org.

Re:How to Run Your Own Mail Server (2017) by cpncrunch on Saturday January 27, 2018 @11:44AM (#16246846)
Did you fill in the delivery problem form?

https://support.google.com/mail/contact/msgdelivery?vid=0-35...

I had a problem with ipv6 myself with gmail, but the problem was that I just didn't have ipv6 fully set up on my server, so either SPF or reverse DNS wasn't working or something like that. I think I just configured sendmail to only use ipv4 and that solved the gmail issue.

Re:How to Run Your Own Mail Server (2017) by saltybytes on Saturday January 27, 2018 @05:07PM (#16248366)
"I think I just configured sendmail to only use ipv4 and that solved the gmail issue."

This was my experience, too. I took this advice [1] configuring postfix and Gmail started to accept my emails.

[1] https://christian.skala.me/blog/gmail-why-are-you-doing-this...

Re:How to Run Your Own Mail Server (2017) by cpncrunch on Saturday January 27, 2018 @09:00PM (#16249293)
My issue was that I wasn't very familiar with ipv6, and my ISP (OVH) apparently gave my server a range of about 256 ipv6 addresses, and I didn't really know how to properly set up reverse DNS and SPF. After spending a day or two getting nowhere, I just decided to turn off ipv6 completely for the server.
Re:How to Run Your Own Mail Server (2017) by megous on Saturday January 27, 2018 @01:10AM (#16245078)
Hmm, but where do you ask for that?
Re:How to Run Your Own Mail Server (2017) by cpncrunch on Saturday January 27, 2018 @11:41AM (#16246835)
Re:How to Run Your Own Mail Server (2017) by dasil003 on Friday January 26, 2018 @03:16PM (#16242512)
On the plus side, do you really want to communicate with anyone who uses a SBCGlobal email address?
Re:How to Run Your Own Mail Server (2017) by collinmanderson on Saturday January 27, 2018 @09:45AM (#16246374)
That’s kind of harsh. I know a lot of people with sbcglobal addresses, and yes I want to communicate with them.