The Definitive Guide to Advanced Mail Server Management: Expert Techniques and Best Practices

Once your own mail server is sending and receiving, the real work begins: choosing and tuning the mail transfer agent, making Dovecot fast, filtering mail on the server, and keeping spammers and password-guessers out. This guide covers those advanced tasks for a server you run yourself, such as a VPS. It assumes you already have a working Postfix or Exim with Dovecot, and it applies to your own server only, not to shared hosting.

1. Postfix or Exim?

Both are mature, maintained and widely used. Choose on how you want to manage policy, not on speed.

Switching MTA on a live server is rarely worth it. If you must, do it in a maintenance window:

# AlmaLinux / Rocky Linux example
sudo cp -a /etc/postfix /root/postfix-backup-$(date +%F)
sudo dnf install epel-release
sudo dnf install exim
sudo systemctl disable --now postfix
sudo alternatives --config mta        # choose sendmail.exim
sudo systemctl enable --now exim

Then rebuild your settings in Exim (relay rules, TLS certificate, authentication through Dovecot, local delivery to Dovecot over LMTP), test with exim -bV and exim -bh 203.0.113.10, and send test mail both ways. Mailboxes stored by Dovecot in Maildir don't need migrating, because Dovecot, not the MTA, owns them. MX records don't change either, as long as the server's hostname and IP stay the same.

For writing Exim rules, see the custom Exim ACL guide.

2. Tuning Dovecot

Check your version first with dovecot --version. The examples below use Dovecot 2.3 syntax, which AlmaLinux and Rocky Linux ship. Dovecot 2.4, found in newer distributions such as Debian 13, renamed many settings (for example, mail_location was replaced), so use the 2.4 documentation if that is what you run.

Settings live in /etc/dovecot/conf.d/, split by topic. Useful ones:

# 10-mail.conf: Maildir in each user's home
mail_location = maildir:~/Maildir

# 20-imap.conf: connections per user from one IP (default 10)
protocol imap {
  mail_max_userip_connections = 20
}

# 10-master.conf: allow more simultaneous logins on a busy server
service imap-login {
  process_min_avail = 4
}

• Raise mail_max_userip_connections only if users with several devices behind one office IP hit the limit.
• Put mail on fast storage. Dovecot's index files make large folders fast, and NVMe storage helps most on busy servers.
• Compression saves disk space for large archives; in 2.3 it is the zlib plugin, in 2.4 mail_compress.

After every change, check the effective config and reload:

sudo doveconf -n | less
sudo systemctl reload dovecot

3. Server-side filtering with Sieve

Sieve filters run on the server as mail is delivered, so they work the same in every mail app. Install Pigeonhole (dovecot-pigeonhole on AlmaLinux and Rocky Linux), then enable it for local delivery:

# 20-lmtp.conf
protocol lmtp {
  mail_plugins = $mail_plugins sieve
}

# 90-sieve.conf
plugin {
  sieve = file:~/sieve;active=~/.dovecot.sieve
}

A simple script that files tagged spam into the Junk folder:

require ["fileinto"];
if header :contains "X-Spam-Flag" "YES" {
  fileinto "Junk";
  stop;
}

Compile it with sievec and test it against a saved message with sieve-test. Enable the ManageSieve service so users can edit their own filters from webmail.

4. Webmail: Roundcube and alternatives

Roundcube is the standard choice and is actively maintained. Plugins worth enabling:

• managesieve: users edit their Sieve filters and vacation replies;
• password: users change their mailbox password;
• markasjunk: users train the spam filter;
• archive and zipdownload: tidy folders and download messages.

Enable plugins in config/config.inc.php (or /etc/roundcubemail/config.inc.php for a distribution package):

$config['plugins'] = ['archive', 'zipdownload', 'managesieve', 'password', 'markasjunk'];

Keep Roundcube updated; webmail faces the internet and is a frequent target. Maintained alternatives include SOGo (mail, calendar and contacts with ActiveSync) and SnappyMail. Avoid SquirrelMail and RainLoop, which are no longer maintained.

5. Security: stop abuse in and out

An Exim rate limit for authenticated senders, in the RCPT ACL:

deny  authenticated = *
      ratelimit     = 200 / 1h / per_rcpt / strict / $authenticated_id
      message       = Sending rate limit exceeded, try again later

A DNS blocklist check in the same ACL:

deny  dnslists = zen.spamhaus.org
      message  = Rejected: $sender_host_address is listed at $dnslist_domain

Also require TLS for logins (ports 465, 587, 993 and 995), disable plain-text authentication on unencrypted connections, and keep the OS and mail packages updated.

6. Monitoring and alerts

• Queue size: mailq or postqueue -p for Postfix, exim -bpc for Exim. A queue that grows suddenly usually means a compromised account or a blocklisting.
• Daily reports: Logwatch summarises logs; pflogsumm (Postfix) and eximstats (Exim) report volume, rejects and top senders.
• Blocklist status: check your server IP against the major blocklists regularly, and after any spam incident.
• Deliverability: watch DMARC aggregate reports and the postmaster tools of large mailbox providers.
• Alerts: have your monitoring system alert on queue size, disk space and failed-login spikes, not only on the server being down.

7. Where Domain India fits

Your own mail server on a VPS. Our VPS plans give you root access and are self-managed, so the MTA, Dovecot, spam filtering and deliverability are yours to run. The VPS page says you can set custom reverse DNS (PTR) records for your IPs from the client area, which a mail server needs. Before you build, ask support whether outbound port 25 is open for your VPS.

Or let us run the mail. Business Email gives you mailboxes on your own domain without running a server: webmail with calendar, contacts and tasks, IMAP and SMTP over TLS, DKIM signing on every message, SPF and DMARC records provided, two-factor authentication, and mail filters. It is priced per mailbox.

The cards show live prices, excluding 18% GST. On 19 September 2026, Domain India list prices were ₹553 a month for VPS Starter and ₹60 a month per Business Email mailbox.

Ready to decide? If you want full control, start with a self-managed VPS. If you just want reliable mail on your domain, see Business Email. Questions? Open a support ticket or use the 24/7 live chat.