Migrarea de la Google Workspace sau Microsoft 365 la mail self-hosted nu mai e nebunie. Pentru cerinte GDPR stricte sau cost-constient — decizie rationala.
De ce self-hosted
- Suveranitate date — toate email-urile in jurisdictia ta (RO, UE)
- Cost predictibil — VPS €30/luna suporta 100-500 mailbox-uri (Google echivalent: €500-2500/luna)
- Control complet — DLP custom, retention specifica, audit complete
- Zero vendor lock-in — protocoale standard IMAP/SMTP
Stack tehnic
Postfix MTA cu backend PostgreSQL/MySQL pentru virtual mailboxes. Dovecot IMAP/POP3 cu filtering Sieve. Rspamd anti-spam (modern, rapid). ClamAV antivirus. Roundcube sau SOGo webmail. Postscreen prima linie anti-bot.
Securitate email moderna
- DKIM — semnatura criptografica outbound
- SPF — autorizare SMTP outbound
- DMARC — policy enforcement + raportare
- MTA-STS — incriptare obligatorie SMTP
- TLSA / DANE — verificare cert via DNSSEC
- Greylisting — reducere spam 90%
Provocari reale
IP reputation — un IP nou are reputatie zero. Warm-up gradual zile-saptamani. Microsoft 365 / Gmail whitelisting necesita JMRP/SNDS enrollment. Reverse DNS (PTR) obligatoriu, configurat de ISP.
Pentru cine NU recomandam
Sub 20 mailbox-uri sau organizatie fara capacitate operationala permanenta — better stick with Google Workspace. Self-hosted necesita maintenance proactiva.
Ce livram
Mail server full operational cu webmail, anti-spam tuned, DKIM/SPF/DMARC validate la mxtoolbox, backup automat, monitoring deliverability, training echipa.
Exemplu: Postfix main.cf
Setarile esentiale din main.cf (TLS, DKIM, anti-spam RBL):
# /etc/postfix/main.cf — esential
myhostname = mail.example.com
smtpd_tls_security_level = may
smtpd_milters = inet:localhost:8891 # OpenDKIM
smtpd_recipient_restrictions =
permit_mynetworks,
reject_unauth_destination,
reject_rbl_client zen.spamhaus.org