1

Topic: Asking for possibility before asking for help

The scenario is attached, but in the end is this:

I want to move all my mail to be managed in my homelab, instead of the cloud, but since I use broadband, port 25 is blocked and also have a dynamic public IP. Have to PMAP incoming 2525 WAN side to 25 LAN side.

The idea is to have my own Relay in the Internet with a fixed IP that would be a proxy for all the incoming and outgoing emails.

Proxmox Mail Gateway will be the frontend (MX) and iRedMail to be the backend.
I added a DDNS service and mapped the DDNS domain to a CNAME in my DNS. All mail services, except the MTA <> MTA, will be provided only internally (iMAP, POP3...) accessing the iRedMail via VPN services.

In my homelab I have my own local domain and iRedMail have it's own host and domain, that is not the on in the public DNS.

The question is, does the iRedMail host/domain configured in the server must be the same defined in the CNAME record as the relay destination?

Post's attachments

Mail_Service.png
Mail_Service.png 61.86 kb, 1 downloads since 2025-03-27 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Asking for possibility before asking for help

Port 25 on WAN must be open, because it's used for communication between email servers.

3 (edited by Alvaro Rodrigues 2025-03-27 22:56:08)

Re: Asking for possibility before asking for help

ZhangHuangbin wrote:

Port 25 on WAN must be open, because it's used for communication between email servers.

Hi Zhang, thanks for the prompt answer and glad to see that the server and installation process has much improved in the last 7 years. Keep up the great work.

I'm opening port 2525 and mapping it to port 25 on the server that iRedMail is listening to.
So the transports in PMG is set to homelab.my.domain:2525, that is the CNAME that points to the my local router dynamic IP. Everything that gets to port 2525 is then mapped to port 25 on server mail.home.

In theory, iRedMail is listening to port 25, as if it was in the Internet.

My concern is that if the different host/domain names are going to be an issue, since the packages are sent to homelab.my.domain, but the actual server is mail.home. I´m concerned that this mismatch could somehow impact mail delivery.

4

Re: Asking for possibility before asking for help

You get me wrong. What i mean is, the server connects to internet directly must open port 25.