Mox – modern, secure, all-in-one email server

Wow... having just gone through a 20+ hour byzantine nightmare of setting up postfix &amp; dovecot (that&#x27;s on top of an already deep understanding of SMTP, DKIM, SPF, DMARC, SASL, etc.) and now struggling through an even more kafkaesque nightmare of rspamd (with its 3 different programming languages needed to understand its 92+ configuration files, which you can&#x27;t modify by the way, you have to add your own &quot;override&quot; and &quot;merge&quot; config files on top of that mess) for the simple purpose of getting it to DKIM-sign my stupid outgoing messages the way all the big mail systems want... I wish I had seen mox earlier!<p>Not sure its quality, but battling with postfix &amp; dovecot&#x27;s 20+ years of legacy cruft, I felt compelled many times to just throw them aside and build something like this on first principles - simple single binary mail server with modern protocol support, sans all the archaic UNIX-account timesharing-era sendmail bullshit that still lives on in the mainstays.<p>Going to have a look at this one, despite now having moderately deep postfix &amp; dovecot knowledge.

I&#x27;ve hosted my mailserver myself for years now. I recently (a number of months ago) have started using Mox for my mail server (after using stalwart, manual postfix&#x2F;dovecot, a couple others). It&#x27;s a perfect solution for a small personal mailserver.<p>It&#x27;s among the simplest (&#x2F;least complicated) mail servers I&#x27;ve used, and I have to waste basically zero time on it. Running backup &amp; update every couple months takes &lt;5 min.<p>However, I noticed: when I showcase it to some people, some of them mistake the very simple minimalist web interface for being ‘outdated’ or similar - it appears that to be &quot;modern&quot;, things are required to be extremely bloated, and even technical people look down on fast (seriously: try it) clutter-less design.

So happy to see that. Hopefully more people will run their own E-mail instead of being slaves to the large adtech &quot;free&quot; e-mail providers. We need more balance on the Internet.

It&#x27;s cool to see some new modern all-in-one email solutions. Stalwart is another good one. Would be even cooler to see this lead to a bit of a resurgence of small and self-hosted email providers.

I have some questions for the creator of this software if they happen to be paying attention to this thread. I have been running a small scale email server for about 10 different related business domains. Currently we use iRedMail. 1) Does the webmail client support 2FA? 2) Is it possible to do 2FA in thunderbird? 3) Can I make custom rules for BEC attacks (ideally I want to define “FirstName LastName” =&gt; email@domain.com whitelists using regex patterns. We get a LOT of very targeted BEC attacks and we have found this is the best way to handle it. We have it very locked down now. Yes we also do employee education on what to look for but this also helps. 4) does the webmail client do banners like “this sender is outside of your org” or “you have never received an email from this sender beige” etc.<p>Thanks!

How does mox compare to maddy, another Go all in one mail server ? Does mox support antivirus addition ? Didn&#x27;t see that in the docs but I may have skipped that section.

set this up today, the documentation is useful and the quickstart very helpful, the dns stuff pretty much works exactly as it&#x27;s supposed to and is just a bunch of copypasting (in my registrar&#x27;s ui).<p>specifically for mox there was some things i would have liked to see: explain how the webmail isn&#x27;t accessible on the public ip by default - i don&#x27;t know how many of you want to be in a specific vpn for checking your email, but i sure was surprised i couldn&#x27;t reach it, but had to activate it in config (and first figure out how to even do that). mox also doesn&#x27;t redirect to https by default - imo it should, since it already includes the convenient automated certificate setup (which worked great).<p>maybe it is intended for a different environment, but since it recommends not running another webserver on the same host, i really don&#x27;t want to access the webmail from the local server or by http. i like most of my services being available behind a reverse proxy, there it would make more sense. maybe i&#x27;ll look into that variant later, but the documentation isn&#x27;t quite as complete as i&#x27;d like.

After 21 years of hosting my own email server, starting with roll-your-own (anyone else remember sendmail.cf?) and moving to boxed solutions such as mox or mailcow, I gave up. Maintaining IP reputation and keeping up with the neverending set of arbitrary rules (spf, dkim, etc) I found my time was worth something too. Doing an honest ROI calculation, I figured i was spending 2 hours on average each month keeping the plumbing going. For me, that was well-worth the ~15&#x2F;month that proton charges. I bet there are other good ones out there too!<p>To be honest though, throughout those decades, I learned a vast amount about how email flows. That knowledge is irreplaceable.<p>My recommendation is to try your own until you really, REALLY understand it. Then move to a paid solution.

Has someone compared this to other modern alternatives? Stalwart (open core), chasquid, maddy, ...?

A somewhat related tangent, has anyone got good desktop email client recommendations? Preferably macOS&#x2F;Linux.<p>I have 6ish email accounts I need to monitor, and outside of Outlook (and the various hellish variations of it), I&#x27;m yet to find a good client like all smartphones seem to have - all inboxes in one client presented together. I recall having a number of issues with Thunderbird a few years ago when I last tried it, but I don&#x27;t remember why.

With that top screen shot, I&#x27;m surprised that it does&#x27;t have UUCP support.

From the FAQ<p>How do I configure a second mox instance as a backup MX?<p>Unfortunately, mox does not yet provide an option for that. Mox does spam filtering based on reputation of received messages. It will take a good amount of work to share that information with a backup MX. Without that information, spammers could use a backup MX to get their spam accepted.

Sounds interesting.<p>I didn&#x27;t find anything about sub-addressing in the features list. Is it a supported feature?<p>Also, with a version number starting with 0.0. I&#x27;m left wondering if Mox is already stable enough to be entrusted with my precious email.<p>Other options i&#x27;m considering are mailcow running in docker.

Enjoy the presentation of Mox at Golang Rotterdam: <a href="https:&#x2F;&#x2F;youtu.be&#x2F;KiDP_JoomOY?si=CyiUEgc8J5WfNZ5R" rel="nofollow">https:&#x2F;&#x2F;youtu.be&#x2F;KiDP_JoomOY?si=CyiUEgc8J5WfNZ5R</a>

That webmail screenshot made me realize how much I desperately miss threaded mail&#x2F;news readers. &lt;3 I should figure out how to make Roundcube do that.

Funny that, I was looking recently for a small, local smtp <i>server</i> to get notifications from my printer and other stuff and... there isn&#x27;t. All you get are the ginormous ones with <i>decades</i> of crud attached.<p>So I ended up writing my own of course; no need for all the fancy features, just PLEASE let me receive email over SMTP and deliver them locally with &#x27;dma&#x27;. Pfew.

This seems like a good place to ask - does anyone have recommendations for a mail server and webmail integrated with CalDAV and CardDAV?<p>I was looking at Horde&#x27;s Imp, Kronolith and Turba so far - <a href="https:&#x2F;&#x2F;www.horde.org&#x2F;apps" rel="nofollow">https:&#x2F;&#x2F;www.horde.org&#x2F;apps</a> - they seem OK but is there anything else in this area?

I appreciate the Plan 9 colors in the webmail UI.

But how do you get a &quot;clean IP&quot; to actually run it on? My ISP&#x27;s IP changes every so often (whenever there&#x27;s a power outage for example).<p>Last I checked, you can&#x27;t run mail servers on typical cloud providers (like Azure, Oracle) and cheap VPSs are almost guaranteed to have &quot;dirty IPs&quot; (used for spam and thus blacklisted).

I feel like there&#x27;s going to a very slow trickle of (a trivial number of) users towards either self-hosting mail or a growing cottage industry of smaller-scale mail services hosted outside the US.<p>Of the growing number of self-hosting options, I&#x27;m not sure how many of them are designed to scale, or to what scale they can scale...

Set it up in mid 2023, still running good! Getting it going was fun, staying on top and maintaining it isn&#x27;t really...

I&#x27;ve been using maddy. It seems this has more features (like web interface, reputation tracking etc).

Since the late 90s I&#x27;ve always had the thought in the back of my mind that one day I would run my own mail server. That day never came and the task seemed more and more impossible. This looks genuinely manageable, I might actually give this a shot when I get off work.

I&#x27;m very happy to see this as I have been advocating for something like this for quite a while: a single setup and configuration that handles SPF, DKIM, DMARC all together.<p>I understand, and appreciate, the modular philosophy behind OpenSMTPD, etc., but in practice it is quite frustrating and difficult to piece it all together - especially if you add rspamd, etc.<p>Speaking of which, how is spam handled ? I see this in the FAQ:<p>&quot;Mox does spam filtering based on reputation of received messages.&quot;<p>... but it is not further elaborated.<p>Also:<p>I <i>assume</i> that the web service can be fully disabled and Mox can be run with no httpd but that is also not specifically called out ... can it ?

Nice, but it&#x27;s so much easier and cheaper (in time spent) to just use a trusted and secure mail provider with your personal domain. Mailbox.org is my favorite - dkim, encryption, webdav all work out of the box with Android apps available.

How does integrating all modern email protocols into a single application like Mox impact performance and security compared to using multiple separate components?

Is there an implementation of the same capability as a JS lib? So that one could have an email server running as part of their Node.js &#x2F; other runtime?

Nice work.<p>Does it include shared folders? I look forward to seeing one of these projects include either that or NNTP support. Then we can get rid of Slack.

Can I use this instead as a frontend for an existing server? UI is perfect for me but I don&#x27;t want to fully self host anything but the UI.

Wow this looks great! Email was such a hassle a few years ago that I kind of just gave up on hosting it myself.<p>Definitely trying this!

Really nice- I want a distro package. Managing updates manually gets out of control fast if you run many services.

I like old school interfaces as much as the next nostalgic hackernews reader, but nothing about this looks “modern”.

I used mailinabox[1] for years before finally biting the bullet and switching everything over to a hosted email platform.<p>Hosting your own email servers <i>sounds</i> good, until:<p>- Gmail and MS fling your emails in junk, despite ranking 10&#x2F;10 on mailtester.net<p>- You have to search for old emails through RoundCube&#x27;s byzantine UI (and eventually giving up)<p>[1] <a href="https:&#x2F;&#x2F;mailinabox.email&#x2F;" rel="nofollow">https:&#x2F;&#x2F;mailinabox.email&#x2F;</a>

Do you have plans to support docker, perhaps by creating an official Mox container image?

The biggest problem with running your own hosted email server is that the giants (Google, Microsoft, Yahoo ...⁾ tend to block all the incoming mail.<p>Sometimes you can contact them and ask to be removed from whatever list or be allowed.<p>In my experience that lasts about a week, then blocks again.<p>I eventually gave up.<p>Tons of bots out there looking for SMTP serveres too, .

perhaps this is a FAQ but does this handle virtual domains like Postfix and Dovecot can?<p>i.e<p>person@fred.com and person@mary.com are completely separate domains&#x2F;imap accounts on the same server?

Sad that the documentation isn&#x27;t very friendly. Is this a replacement for Gmail? Can i use it with Thunderbird? Is it going to

Always interesting to see another implementation of IMAP4! Congrats.

how does it compare to migadu?

does this support JMAP yet

On a side note, how long until we realize the current incantation of the pile of hacks upon hacks that is SMTP is fundamentally flawed and widely adopt something that has cryptography, authenticity and transport-level security built-in from the start?<p>Oh wait, yes, that&#x27;ll never happen.

If I spun this up and attached it to my domain, would my emails be received by gmail&#x2F;outlook&#x2F;etc?<p>I&#x27;m pretty happy with forwardemail.net as a mail server, I selfhost snappymail to access it through a web browser. Not sure I want to take the step to selfhosting an email server, but I love the idea of cutting that external dependency.

Mox is written in Go. What advantages does this provide in terms of performance and security compared to traditional email servers, which are often written in C?

I&#x27;m not sure whether to use stalwart or mox

It claims to be modern, yet the landing page looks outdated.

Don&#x27;t run your own mail server. You&#x27;ll be attacked and get blacklisted and won&#x27;t even know that it happened or why until you find out none of your emails to anyone get through.<p>Securing a mail server is full time plus job. Proton is great and free with their domain and cheap with yours.