Post #2563459
2026-05-09 00:00 UTC
@ryanc@infosec.exchange @owen@mastodon.transneptune.net I don't run my own mail, mostly because I'm on a DOCSIS pipe that (despite being a static) is probably part of a larger netblock that's on spam blacklists.
At some point maybe I'll look at getting a box in a colo or something to do that but right now I don't have time to deal with the hassle of actually making my mail be delivered.
I do want to move to a managed mail host that is anything-but-ms365 though, since my previous mail host rolled up their in house operation and turned into a 365 reseller
Replies (2)
-
@azonenberg@ioc.exchange 2026-05-09 00:04
@ryanc@infosec.exchange @owen@mastodon.transneptune.net but like, for scale my internal BIND zone file has 177 A records in it, split across 20 subnets. This is not a small network so an internal CA is a tiny amount of management overhead compared to everything else.
-
@dalias@hachyderm.io 2026-05-09 00:06
@azonenberg@ioc.exchange @ryanc@infosec.exchange @owen@mastodon.transneptune.net For outgoing mail you can tunnel the connection thru a non-shitlisted IP while still terminating TLS on your side. I'm planning to add functionality to do this to mxclient. Using SOCKS proxy or pipes with ssh -W.