Post #3070464

Someone tell me why this is a good or bad idea: I self host my own email service. Due to the nature of email, I obviously need to read and send email from my phone, my laptop at home (dynamic ip), maybe with the laptop when using outside wifi. Now, all that will use TLS, strong passwords, etc. However, I don't want IMAP, and the SMTP submission port to really be open to the wide internet. Why could I not, run python app in an AWS Lambda function, listening on an encrypted API that sends a key, I validate that, and if valid, I take the source address of the call, store it in DynamoDB with a timestamp, and pop it into the security group of the mail service? Bang. Access granted. Then, the Lambda function cleans up any ip that hasn't been seen within the last 10 minutes and closes that hole in the security group if needed.