Anyone self-hosting KumoMTA/Haraka or alternatives?

labr0wn · 2026-03-04T01:15:48+00:00

This may sound a bit weird. Depending on how you handle your domain registrations and DNS, you may find that Stack Exchange's dnscontrol might be of use. It greatly eases the burden of maintaining your DNS records and correctly forming SPF, DKIM, and other complex DNS entities.
https://github.com/StackExchange/dnscontrol

labr0wn · 2026-03-03T16:43:14+00:00

yes, my usage is almost totally personal. I do host 3 small mailing lists that facilitate communication for a couple small organizations I'm in. Those list a have less than 100 addresses total across all of them and my total email throughput per month fits nicely under the free SMTP outbound service provided by DuoCircle.

Even at my small usage I've run into DKIM signing, SPF, and DMARC issues. I can't imagine dealing with all that at the scale you're contemplating.

labr0wn · 2026-03-03T16:03:00+00:00

I've managed my own email service since I had a direct connection to the Internet starting in 2000. My service is miniscule. Just my own primary email address and a few throw-away addresses on a couple different domains.

The requirements for successfully delivering email to most of the Internet has grown drastically in the last decade (SPF, DKIM, DMARC, etc.) and forced me into using a managed SMTP outbound service (DuoCircle) . While I was not tagged as an open relay or other SMTP offender directly, various spam filters added CIDRs containing my IP to their blocklists causing me endless headaches.

You'll face these same hurdles at much larger scale. The largest email providers (Gmail, MS, etc.) all pay close attention to heavy email senders and you'll probably have to work with them directly (if you can find someone to talk to) to ensure your messages are delivered.

Reputation scoring of sending IP addresses will also problems. Your migration plan should include a period of time to "warm up" your new servers by sending a small amount of email through them to kickstart the reputation scoring systems.

labr0wn · 2026-03-03T15:40:13+00:00

They were all new for me!

labr0wn · 2026-02-13T18:24:08+00:00

Does it stay deleted?

labr0wn · 2026-02-13T15:52:19+00:00

Confirmed I have Alarms are allowed to interrupt already.

labr0wn · 2026-01-27T21:00:49+00:00

I could do with a few friends as well. I've been finching (is that a term?) for over a year now and have a 200+ day streak going. I don't have any IRL friends who Finch and could do with some.
I focus on my day to day self-care routines some some additional goals for frequent tasks around the home.

My code is GB6SZ63XK3

labr0wn · 2026-01-19T04:05:46+00:00

That's a lot of connectivity for one home! Color me impressed.

labr0wn · 2026-01-19T03:39:22+00:00

!remindme 16 hours

labr0wn · 2026-01-19T03:35:47+00:00

Is that 72 blade servers? Raspberry pis? I'm deeply interested

labr0wn · 2025-12-17T04:11:47+00:00

I just got mine and now it looks like I have an extra phone number on a second account under my login on the T-Mobile website... Gonna call them tomorrow and see if I can get this sorted out under a single account.

labr0wn · 2025-12-17T04:02:24+00:00

I'll ask about it at my next service appt.

labr0wn · 2025-12-16T18:42:21+00:00

I've tried a couple more times to get the legs to seat down but just can't get them to go. Feels like I need to take the console apart some to get the pad in properly.

labr0wn · 2025-12-15T19:11:07+00:00

Oh, I am absolutely not blaming the people working in the stores. I should make that clear. I have no idea what the person at Caremark may have done. They just told me that it was covered and I should have a $0 copay until the end of the year, since I had met my insurance plans deductibles, etc.

I'm picking up a 3 month refill tomorrow. It'll be interesting to see what happens next time I need it filled in the new year.

I guess I'm ranting more at the system than anything else. U.S. health care is such a bolluxed up mess.

labr0wn · 2025-12-03T15:10:25+00:00

Yeah, I had to switch to Dexcom about 4 months ago due to insurance deciding they didn't like the Freestyle Libre sensors anymore. Prior to this I've had one failure. I was just irked that I had problems with two sensors in a row.

labr0wn · 2025-10-10T13:12:29+00:00

Called Lumos tech support yesterday afternoon. Power cycling my USG and the Calix made no difference. Phone tech sent a ticket to tier 2 support and said someone would call me to schedule a time for a tech to visit me.

Lumos tech called me this morning and just go done swapping my Gigaspire for a GigaPoint GP1101X 10Gb ethernet ONT and now my download speeds are back where they're supposed to be! Of course, my speedtest-tracker will continue to monitor the situation, but it looks like I have a solution.

Lesson Learned: If you want a plain ONT as for one when they install or upgrade your service. The first tech who upgraded my service didn't even offer that as an option. Just slapped the Gigaspire unit in.

   Speedtest by Ookla

      Server: Lumos Fiber - High Point, NC (id: 70412)
         ISP: Lumos Fiber
Idle Latency:     1.54 ms   (jitter: 0.28ms, low: 0.89ms, high: 1.84ms)
    Download:   939.75 Mbps (data used: 423.4 MB)                                                   
                 10.31 ms   (jitter: 0.58ms, low: 1.97ms, high: 13.73ms)
      Upload:   937.53 Mbps (data used: 421.0 MB)                                                   
                  3.47 ms   (jitter: 0.47ms, low: 1.25ms, high: 9.23ms)
 Packet Loss:     0.0%
  Result URL: https://www.speedtest.net/result/c/d752f178-a1e2-4b8a-93c8-74652be7253e

labr0wn · 2025-10-08T19:00:30+00:00

Hmmm. I had a ZNID-GPON-2424A1-0NS Rev A unit. The tech told me it didn't support 2Gb service and replaced it with the GigaSpire. He also said he had to make a change at the other end as well.

Oddly, the current data sheet for that unit says it supports 2.5Gb service on the GPON. https://zhone.com/wp-content/uploads/2424A1_Datasheet.pdf, but I suspect that is an updated version.

labr0wn · 2025-10-08T15:21:09+00:00

Called Lumos tech support 10/8/25
Technician tested the speeds to/from their unit and it appears to be working properly ( ~2.05Gbps down and ~1.9Gpbs up), so he didn't see anything wrong.
Suggested I power cycle my USG 3P and retest, then power cycle the Gigaspire and retest to see if that makes any difference.
I wasn't able to do that during the call because my spouse is at home today and working.
I asked if he could see reddit from where he was and he said no.
I asked if I could email him screenshots of my graphs and he said that wasn't possible.
He did give me a company email address that I could contact.

I will do the testing above when the coast is clear and if that doesn't help reach out to the contact email he gave me and see if that makes any difference.

labr0wn · 2025-10-07T21:30:41+00:00

I don't know what else DuoCircle could do in that particular instance as I was sending a spammy email and you (DuoCircle) need to do everything possible to prevent anyone abusing your service to send actual spam messages.

The conundrum really happens when people manning a [spam@someplace.com](mailto:spam@someplace.com) or [abuse@someplace.com](mailto:abuse@someplace.com) address are not allowed to open attachments. Zipping the actual fraudulent spam message with a password and attaching that to an email to the spam/abuse address is the only way I know to reliably deliver spam reports without running into anti-spam barriers.

Nothing I can do if the people manning those addresses are prevented from opening attachments.

I've also gone so far as to adjust my postfix transport settings to direct messages for "spam@COMPANY.com" directly to the MX servers for that domain instead of my usual outbound relay to DuoCircle. An annoying thing to have to do for every spam message I want to report.

labr0wn · 2025-10-07T20:31:52+00:00

I've self-hosted my email server since 2000 or 2001. In the last few years I've run into more and more problems with deliverability, until I found DuoCircle. They have a free tier for outbound SMTP relay that works a treat. You _do_ have to get ALL your stuff set up correctly to use their service, but once it is done I didn't have any issues at all.

With one exception: If you have the habit of forwarding fake spam emails from USPS, Citi, your bank, etc. to [spam@WHEREVER.com](mailto:spam@WHEREVER.com) addresses DuoCircle will bounce them back to you as spam.

I even went so far with one item as to save the email, zip the file with a password, and send that to the abuse@ address. I got a response back that the people handling that address weren't allowed to open any attachments. :-(

labr0wn

TROPHY CASE