|
|
Subscribe / Log in / New account

Distribution quotes of the week

Distribution quotes of the week

Posted Jan 6, 2022 23:41 UTC (Thu) by flussence (guest, #85566)
Parent article: Distribution quotes of the week

I run email infrastructure and all the headaches mentioned here are real. It takes an entire weekend to set up Postfix, Dovecot, TLS certificates, DNSBLs and greylists and spamfilters, SPF and DKIM and DANE and DMARC, …

…and then it takes near-zero effort to *keep* running, without the untraceable negative externalities of feeding an advertising panopticon meat grinder.


to post comments

Distribution quotes of the week

Posted Jan 7, 2022 0:10 UTC (Fri) by mathstuf (subscriber, #69389) [Link]

> …and then it takes near-zero effort to *keep* running, without the untraceable negative externalities of feeding an advertising panopticon meat grinder.

I tried numerous times to even get the setup I wanted working with Postfix (despite following guides and whatnot). I hadn't even gotten to the SSL or other signing infra at that point. At this point, I'm on Fastmail. Not the greatest compromise given their jurisdiction, but it is way more featureful, has a sane IMAP interface (unlike gmail), and filtering on arbitrary headers is such a breath of fresh air after gmail's lackluster filtering capabilities. Oh, and the web interface isn't a dumpster fire, so there's that going for it too.

But nearly everyone I email is an input to the Google Data Vacuum anyways, so it's not like they'd actually care at all (and given my ad blocking, is probably just a net savings on their ad server CPU cycles anyways).

Distribution quotes of the week

Posted Jan 7, 2022 7:41 UTC (Fri) by nilsmeyer (guest, #122604) [Link] (1 responses)

Are you also hosting your own nameservers? I had some trouble getting DANE to work, for quite a while the registrar didn't support DNSSEC, then since I lazily used Route53 I noticed that Route53 doesn't allow DANE records, so I switched to Google Cloud DNS - still not entirely escaping their grasp.

One problem I have with this setup is that some servers reject my e-Mails out of hand (T-Online, largest ISP in Germany, seems to only allow whitelisted servers) while Google Mail just sorts my e-Mail, at least on first contact, away as Spam - never mind the gobs of Spam I'm receiving from THEM. That system mostly seems reputation based, so I'm not sure how to solve this - I may just end up sending automated e-Mail to a few gmail addresses from time to time which really shouldn't be necessary...

Distribution quotes of the week

Posted Jan 11, 2022 2:05 UTC (Tue) by flussence (guest, #85566) [Link]

I'm using OVH's nameservers. They provide all the necessary bits for a mail server to be a good citizen, though the whitelist of RR types seems to be stuck in the bind8 era and the web UI hurts to use. Costs me roughly ~60€ per decade so I can't really complain. (I did try nameserver self-hosting for a while, then realised I didn't really *need* the ability to do dnssec-secured dynamic-dns for my phone's ipv6, as funny as that was...)

I don't receive a lot of actual email spam as of late, but that's probably because all the clever spammers moved on to panhandling scams in twitter replies, and the dumb stragglers don't know how to scrape a full email address from a webpage. Any of it that does get into my inbox is promptly thrown to a reporting/dnsbl service (Spamcop).


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds