New mailserver

[Kreyren]

The end-goal here is to get self-hosted mailserver with IMAP, POP3, SMTP encrypted through TLS and accesible from tor and webmail UI accesible from web browser.

Requirements

• Free and Open-Source
• Has to have web-UI
• POP3
• IMAP
• SMTP
• Accesible from tor
• Self-hosted
• PGP encryption
• Spam filtering
• Hardened

Candidates

• https://mailcow.email/
  • Currently the best candidate
• https://roundcube.net/
• http://www.squirrelmail.org/
• https://www.mailpile.is/

Needs processing

• https://wildduck.email/
• https://modoboa.org/en/
• https://mailu.io/1.7/

Decision

Relevants

• Cherry-picked list of cool webservers that fit our requriements https://github.com/awesome-selfhosted/awesome-selfhosted#email
• https://en.wikipedia.org/wiki/Comparison_of_mail_servers
• https://github.com/ehloonion/onionmx

[Kreyren]

I've used Courier and Dovecot. They're both fine. I've not used Exim but I hear good things. Both do POP & IMAP and can support TLS. -- Anonymous

[Kreyren]

My current set up consists of Dovecot to handle POP & IMAP. Postfix for SMTP. SpamAssassin and ClamAV for filtering of incoming messages. This provides a web interface: http://usermin.com/usermin.html -- Anonymous

[Kreyren]

Your certificate from Let's Encrypt could also be re-used for this purposes by telling e.g. Postfix and Dovecot or whatever to also use it. -- Anonymous

[Kreyren]

kreyren: use lmtp to deliver to dovecot. use amavis with lmtp delivery for content filtering, spamassassin. forget clamav, it's a joke. equally harden dovecot with systemd service hardening and apparmor profile. both postfix and dovecot apparmor profiles on debian are quite good, I don't think we had to adjust them at all -- Anonymous

[Kreyren]

also consider rspamd instead of amavis+SA -- Anonymous