# Documentation and information relating to my self-hosted mail server

## Brief Architecture Overview

- Postfix is used as the SMTP server and Dovecot is used as the IMAP server

- TLS certs are obtained via lets encrypt

- OpenDKIM is used for signing paired with SpamAssassin for mail filtering

## Features

- Appropriate DNS records [(SPF, PTR, DKIM, DMARC)](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/mailpass.webp) implemented for authentic, trusted and reliable mail. Full report available [here](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/full_report.txt)

- DNSSEC enabled for Postfix allowing validated MX lookups, with DNSSEC additionally configured for the server's domain to protect the [integrity of record resolution](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/dnssec.png)

- Strong encryption with AES-128-GCM and [secure mail transmission with TLS 1.3](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/tls.webp)

- Mail deliverable to the most prolific service proivders, such as [Microsoft, Google and Yahoo](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/mail_delivered.jpg)

- Fully functional mail accounts accessible via [IMAP/SMTP clients](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/k9mail.jpg)

- Mail accounts secured with a custom IPS script automatically dropping connections from [IPs with suspicious activity](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/banned.webp)

## Extremely useful tools in debugging

- The `` postfix check ``` command

- The ``` doveconf -n ``` command

- https://www.appmaildev.com/en/dkim

- https://sendtestemail.com/

- https://mxtoolbox.com

## Extremely useful documentation

- https://www.postfix.org/documentation.html

- https://doc.dovecot.org/

- https://thomas-leister.de/en/mailserver-migrate-config-to-dovecot-2.4-debian-trixie/

- https://landchad.net/mail/