Email server setup script
I wrote this script during the gruelling process of installing and setting up an email server. It perfectly reproduces my successful steps to ensure the same setup time and time again.
I’ve linked this file on Github to a shorter, more memorable address on my website so you can get it on your machine with this short command:
curl -LO thatwelshgit.ga/emailsetup.sh
When prompted by a dialogue menu at the beginning, select “Internet Site”, then give your full domain without any subdomain, i.e.
Read this readme and peruse the script’s comments before running it. Expect it to fail and you have to do bug testing and you will be very happy when it actually works perfectly.
This script installs
- Postfix to send mail.
- Dovecot to receive mail.
- Config files that unique the two above securely with native log-ins.
- Spamassassin to prevent spam and allow you to make custom filters.
- OpenDKIM to validate you so you can send to Gmail and other big sites.
This script does not
- use a SQL database or anything like that.
- set up a graphical interface for mail like Roundcube or Squirrel Mail. If you want that, you’ll have to install it yourself. I just An Email client
- A Debian or Ubuntu server. I’ve tested this on a Vultr Debian server and one running Ubuntu and their setup works, but I suspect other VPS hosts will have similar/possibly identical default settings which will let you run this on them. Note that the affiliate link there to Vultr gives you a $100 credit for the first month to play around.
- A Let’s Encrypt SSL certificate for your site’s
mail.subdomain. Create a nginx/apache site at
mail.<yourdomain.com>and get a certificate for it with Let’s Encrypt’s Certbot.
- You need two little DNS records set on your domain registrar’s site/DNS server: (1) an MX record pointing to your own main domain/IP and (2) a CNAME record for your
- A Reverse DNS entry for your site. Go to your VPS settings and add an entry for your IPV4 Reverse DNS that goes from your IP address to
mail.<yourdomain.com>. If you would like IPV6, you can do the same for that. This has been tested on Vultr, and all decent VPS hosts will have a section on their instance settings page to add a reverse DNS PTR entry. You can use the ‘Test Email Server’ or ‘:SMTP’ tool on mxtoolbox to test if you set up a reverse DNS correctly. This step is not required for everyone, but some big email services like Gmail will stop emails coming from mail servers with no/invalid rDNS lookups. This means your email will fail to even make it to the recipient’s spam folder; it will never make it to them.
apt purgeall your previous (failed) attempts to install and configure a mail server. Get rid of all your system settings for Postfix, Dovecot, OpenDKIM and everything else. This script builds off of a fresh install.
- Some VPS providers block port 25 (used to send mail). You may need to request that this port be opened to send mail successfully. Although I have never had to do this on a Vultr VPS, others have had this issue so if you cannot send, contact your VPS provider.
- After the script runs, you’ll have to add two additional DNS TXT records which involves the OpenDKIM key that it generates during the script.
Making new users/mail accounts
Let’s say we want to add a user Womble and let him receive mail, run this:
useradd -m -G mail womble passwd womble
Any user added to the
usermod -a -G mail jam
A user’s mail will appear in
~/.Mail/. I you want to see your mail while ssh’d in the server, you could just install mutt, add
set spoolfile="+Inbox" to your
~/.muttrc and use mutt to view and reply to mail. You’ll probably want to log in remotely though:
Logging in from Thunderbird or mutt (and others) remotely
Let’s say you want to access your mail with Thunderbird or mutt or another email program. For my domain, the server information will be as follows:
- SMTP server:
- SMTP port: 587
- IMAP server:
- IMAP port: 993
The last point is important. Many email systems use a full email address on login. Since we just simply use local PAM logins, only the user’s name is used.
You’re a big boy now if you have your own mail server!
You can tweak Postfix (sending mail
Troubleshooting — Can’t send mail?
- Always check
journalctl -xeto see the specific problem.
- Go to this site to text your TXT records. If your DKIM, SPF or DMARC tests fail you probably copied in the TXT records incorrectly.
- If everything looks good and you can send mail, but it still goes to Gmail or another big provider’s spam directory, your domain (especially if it’s a new one) might be on a public spam list. Check this site to see if it is. Don’t worry if you are: sometimes especially new domains are automatically assumed to be spam temporaily. If you are blacklisted by one of these, look into it and it will explain why and how to remove yourself.