You can run a complete personal mail system on a VPS with Mail-in-a-Box, but it must be installed as an appliance on a fresh, dedicated Ubuntu 22.04 LTS 64-bit machine. The software configures SMTP, IMAP, webmail, DNS records, TLS, spam controls, monitoring, and backups; your responsibilities are choosing a mail-friendly VPS, setting DNS and reverse DNS correctly, protecting the backup key, and monitoring delivery.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
This guide takes you from an empty VPS to working mail users, explains the ports and records your clients need, and covers deliverability, backup, migration, and the maintenance limits that make Mail-in-a-Box different from a manually assembled mail stack.
As an Amazon Associate I earn from qualifying purchases.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →What Mail-in-a-Box is and why the VPS must be dedicated
Mail-in-a-Box is an appliance rather than a general-purpose mail framework. Its README describes it as a one-click, easy-to-deploy SMTP-and-everything-else server that helps individuals take back control of email. The installer turns a fresh Ubuntu 22.04 LTS 64-bit cloud machine into a managed mail server and intentionally exposes relatively few configuration choices.
That prescriptive design is the reason installation is comparatively straightforward and also the reason you should not put it on a server that already hosts unrelated software. Existing web servers, mail daemons, firewalls, DNS services, or hand-written configuration can conflict with the appliance. Later manual edits to files that Mail-in-a-Box generates may be overwritten when it manages or upgrades the system.
#1 Best Overall
- 12th Intel Alder Lake N95 Processor – The GMKtec G3 S Mini PC is powered by the 12th Gen Intel N95 processor with 4 cores, 4 threads, 6MB cache and a burst frequency up to 3.4GHz. Compared with N100/N5105/N5100/N5095, the N95 delivers up to 36% overall performance improvement. Perfect for routine tasks, office work, and home entertainment, this compact mini desktop is more convenient than traditional bulky PCs.
- 8GB RAM & 256GB SSD Storage – Pre-installed with 8GB DDR4 memory and a fast 256GB M.2 2242 SSD, the G3 S mini desktop offers quicker startup, smoother multitasking, and faster file transfers. Enjoy seamless performance whether you’re working on multiple applications, browsing, or streaming content.
- Rich Interfaces & Connectivity – The G3 S mini computer comes equipped with USB 3.2 (up to 10Gbps), dual HDMI 2.0 (4K@60Hz), and a 3.5mm audio jack. With support for WiFi 5, Bluetooth 5.0, and Gigabit Ethernet (RJ45 1000MbE), it connects easily with monitors, projectors, printers, office equipment, and other peripherals, making it versatile for both home and business use.
- Dual 4K Display Support – Featuring upgraded Intel UHD Graphics (up to 1000MHz), the G3 S supports 4K video playback and AV1 decoding for a smooth viewing experience. With dual HDMI outputs, you can connect two 4K@60Hz displays simultaneously, enabling efficient multitasking for work and entertainment.
- GMKTEC WARRANTY - GMKtec offers a 3-year limited warranty (1 year replacement + 2 years parts replacement) for each mini PC, starting from the date of the purchase effective on all sales starting Oct. 2026. All defects due to design and workmanship are covered. With a professional after sales team always ready to attend to your needs, you can simply relax and enjoy your mini PC
What the appliance provides
- Postfix for SMTP delivery and submission.
- Dovecot for IMAP and POP mail access.
- Roundcube webmail.
- Nextcloud contacts and calendar functions.
- Spam filtering and greylisting.
- Firewalling, fail2ban, monitoring, and DNS tooling.
- Automatic management of mail-related records when the box is authoritative for your domain.
- HTTPS and mail-service certificates, including free Let’s Encrypt certificates.
Choose a VPS that can actually send mail
The supported image documented by the project is Ubuntu 22.04 x64. Provision a new public-IP VPS with no preinstalled mail or web stack. A small instance may be sufficient for a personal domain, but no universal CPU, memory, disk, or bandwidth minimum is published; size the machine for the number of users, mailbox retention, attachments, and backup history you expect.
Provider checks before you pay
- SMTP policy: Confirm that outbound TCP port 25 is permitted. Some providers block it by default, and many residential networks block it as well.
- Reverse DNS: Make sure the provider lets you set the IP address’s PTR record to the server hostname.
- IP reputation: Ask whether the address is recycled, listed, or replaceable. A poor-reputation address can prevent delivery even when your configuration is correct.
- Abuse rules: Read the provider’s policy for unsolicited mail, compromised accounts, and traffic complaints.
- Replacement process: Establish how to request a clean address if the assigned IP has a delivery-blocking reputation.
- Recovery access: Keep console or rescue access available in case a firewall or DNS mistake prevents SSH access.
Do not treat a VPS as mail-ready simply because it has a public IP. Recipient systems evaluate the IP, forward DNS, reverse DNS, hostname alignment, authentication records, message behavior, and their own reputation history.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Prepare the domain and DNS before installation
Register a domain and choose where its DNS will be hosted. You have two workable models:
Let Mail-in-a-Box manage authoritative DNS
Delegate the domain’s nameservers to the box. In this model, the control panel can publish the MX, SPF, DKIM, DMARC, MTA-STS, and hostname records it needs. You must set the registrar’s nameserver or glue settings correctly, and the delegation must propagate before outside systems can resolve the records.
Keep DNS at your registrar or another provider
Leave the existing nameservers in place and copy every record shown by the Mail-in-a-Box control panel into that DNS service. This gives you continued control through the existing provider, but the box cannot automatically publish changes there. Allow time for DNS propagation whenever you change records.
Records to plan
- Hostname: Choose a stable fully qualified name for the server and make its forward record point to the VPS address.
- MX: Direct the domain’s inbound mail to the hostname served by the box.
- SPF: Authorize the sending address or host shown by the control panel.
- DKIM: Publish the public key generated for your domain.
- DMARC: Publish a policy that evaluates SPF and DKIM alignment and specifies reporting behavior.
- MTA-STS: Publish the policy record and policy file when you use the project’s generated settings.
- Reverse DNS: Set the VPS address’s PTR value to the same hostname used by the server.
Keep the hostname, forward DNS, reverse DNS, and certificate names consistent. Inconsistent names can trigger status warnings, weaken trust with receiving systems, and interfere with automated certificate renewal.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsRank #2
- 【AMD Ryzen 3 5300U CPU: Outperforms N150 & 3500U】 BOSGAME E5 mini PC is powered by the TSMC 7nm FinFET architecture AMD Ryzen 3 5300U processor (4 Cores, 8 Threads, up to 3.8GHz boost, 6MB total cache). Compared to low-end Intel N150 or 3500U chips which only have 4 single threads and throttle under load, the 5300U delivers over 30% faster multi-core speed. Run 30+ browser tabs, large Excel sheets, and Zoom meetings simultaneously without system lag.
- 【8GB DDR4 RAM & 256GB NVMe SSD Storage】 Installed with high-speed 8GB DDR4 dual-channel memory and a fast 256GB M.2 2280 SSD, eliminating slow boot times and application loading delays. To accommodate growing data requirements, the upgradeable hardware design features dual SODIMM slots that allow you to expand memory up to 64GB RAM, ensuring smooth operation during heavy multitasking.
- 【High-Capacity Dual M.2 SSD Storage Expansion】 Never worry about running out of space for your business files. In addition to the pre-installed 256GB system drive, the motherboard houses an extra empty internal M.2 2280 NVMe PCIe 3.0 slot. This allows you to easily add a second solid-state drive for up to an additional 2TB of storage capacity (upgrades not included) without needing to remove or reinstall the original operating system.
- 【Radeon 6-Core Graphics & Triple 4K Displays】 Integrated with official AMD Radeon Graphics (6 Graphics Cores, 1500 MHz frequency) for casual gaming, photo editing, and crisp 4K media decoding. Featuring 1x HDMI 2.0 port, 1x DisplayPort, and 1x Full-Function Type-C port, the E5 outputs true 4K@60Hz resolution to three monitors at once. This multi-screen setup eliminates constant window-switching for traders, programmers, and office workers.
- 【Dual 2.5GbE LAN Ports for Advanced Networking】 Experience fast wired network transmission speeds up to 2500Mbps without lagging or buffering. The integration of dual 2.5 Gigabit Ethernet ports (powered by Realtek RTL8125 controller) makes this compact computer an exceptional hardware choice for tech enthusiasts. Easily configure it into software routers, hardware firewalls (pfSense, OpnSense), home NAS servers, or local homelabs.
Install Mail-in-a-Box on the fresh VPS
Use the project’s release tag rather than blindly installing an arbitrary development revision. The project homepage reports release v76 dated May 24, 2026; verify the current release and its notes immediately before a production deployment because version-specific requirements can change.
- Provision the machine. Deploy a completely fresh Ubuntu 22.04 LTS 64-bit cloud image with a public address. Do not add a web panel, control panel, mail daemon, or custom firewall rules first.
- Set the hostname. Configure the VPS hostname to the fully qualified name you selected, and create or prepare its forward and reverse DNS entries through the provider and DNS host.
- Prepare delegation or records. Either delegate authoritative nameservers to the box or be ready to copy the control panel’s records into your existing DNS service.
- Obtain the source. Clone the Mail-in-a-Box repository and check out the release tag you intend to run, following the project README for the exact repository command and tag syntax.
- Start the installer. From the checked-out directory, run the documented command
sudo setup/start.sh. - Answer the prompts. Supply the requested hostname, domain, administrator details, DNS choice, and other setup values. Use a long, unique administrator password.
- Open the control panel. When setup finishes, connect to the administrative panel over HTTPS using the hostname you configured.
- Resolve status checks. Work through the panel’s checks for DNS, open ports, certificates, and running services before creating accounts for regular use.
- Create mail identities. Add users and aliases in the panel, then sign in to webmail and send test messages to addresses at more than one receiving provider.
The project also provides a guided setup path for operators who prefer a less command-line-oriented walkthrough. The exact expert command sequence belongs to the release README, so use that document when the current release changes the checkout or bootstrap steps.
Configure mail clients and protected services
Mail-in-a-Box blocks unauthenticated submission. Configure every desktop or mobile client for encrypted authentication rather than attempting to send directly to the SMTP service without credentials.
| Function | Ports | Protection documented by the project |
|---|---|---|
| SMTP submission | 465 and 587 | Encrypted submission with authenticated clients |
| IMAP | 993 | IMAP over TLS |
| POP | 995 | POP over TLS |
| Administration and webmail | 443 | HTTPS |
The documented protected services offer TLS 1.2 or newer. Use the server hostname, not an unrelated IP or alias, so the certificate name and DNS records match. For a first test, log in to webmail, send an authenticated message to an external mailbox, reply to it, and confirm that inbound delivery reaches the new account.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Understand TLS: client encryption is not the same as guaranteed delivery
The control panel can request a free Let’s Encrypt certificate for HTTPS and mail services. You can also import another certificate, but a paid certificate is not required for a standard deployment. Keep DNS and hostname records correct so automated renewal and service checks continue to work.
Mail sent between servers uses opportunistic TLS: when the recipient server supports a negotiated encrypted connection, the message is encrypted in transit. Ordinary opportunistic TLS does not prevent an active man-in-the-middle attack because the connection is not necessarily authenticated end to end. DNSSEC and DANE TLSA can provide stronger authenticated transport when both domains publish and validate the required records.
Rank #3
- 【MAX 7735U High Performance 】Powered by the AMD Ryzen 7 7735U (8-Core, 16-Thread, boost up to 4.75GHz), this Beelink SER5 MAX mini PC delivers robust performance for daily office tasks, including spreadsheet editing, PPT creation, email management, coding and web browsing. It effortlessly handles photo and video editing via PS, PR and Lightroom, and runs popular esports titles such as LoL, CSGO and DOTA 2 at excellent settings.
- 【High‑Speed Memory & Storage】 Equipped with 24GB high-speed LPDDR5 RAM and a blazing-fast 500GB M.2 2280 PCIe 4.0 SSD, this BEELINK 7735U MINI PC supports seamless heavy multitasking. It features expandable storage up to 8TB, letting you store massive project archives and local files without worry.
- 【4K Triple Display & Radeon 680M Graphics】 Built-in AMD Radeon 680M Graphics (12-Core, 2200MHz) brings outstanding graphic performance for design work and buttery-smooth 4K HDR video playback. This BEELINK SER5 MINI PC supports triple 4K monitors via HDMI, DP and USB-C port, allowing you to run trading dashboards, spreadsheets and design drafts side-by-side to boost your productivity.
- 【Cooling & Full Connectivity】 This BEELINK SER5 7735U MINI PC adopts an upgraded dual‑cooling system with heatsink and cooling fan that boosts heat dissipation by 19% while keeping noise below 32dB for quiet operation. Equipped with WiFi 6, Bluetooth 5.4 and 2.5G RJ45 Ethernet port, it delivers stable, lag‑free connections ideal for office work, home media and home‑server use.
- 【Lifetime Technical Support】Ryzen 7 mini pc Package Included:1* Beelink Ser5 7735U Mini PC,1* HDMI Cables( 100cm),1* Power adapter,1* User manual,1* Mounting bracket.If you want to set up automatic startup,please contact us.All of our mini pc obtained FCC,CE ROSH Certifications.We Offer 1 Year Free Warranty,and 7 Days/24 Hours Serving,and lifetime technical issue assistance without worrying about quality,just email to our customer service team.
Make SPF, DKIM, and DMARC work together
SPF identifies which hosts are authorized to send for the domain. DKIM signs outgoing messages with a private key held by the box, while recipients validate the published public key. DMARC evaluates whether the visible From domain aligns with SPF and DKIM and applies the policy you publish.
Do not invent these values manually when the panel is managing DNS. Copy the exact records it displays if DNS is external, including the generated DKIM selector and any MTA-STS records. After propagation, use the control panel’s status checks and inspect message headers at a receiving mailbox to verify that SPF, DKIM, and DMARC actually pass.
Free tools Windows power users keep installed
One-click scans. No signup required.
Deliverability is an ongoing operating problem
Mail-in-a-Box cannot control Gmail, Microsoft, Yahoo, or any other recipient’s filtering policy. The project explicitly warns that other mail services might block or spam-filter mail sent from a self-hosted box. A technically correct installation therefore does not guarantee inbox placement.
Signals you can control
- Keep forward DNS, reverse DNS, and the server hostname aligned.
- Publish valid SPF, DKIM, and DMARC records and keep their domains aligned.
- Send only mail your users requested, and investigate unusual volume or authentication failures quickly.
- Monitor bounces, rejection codes, and spam-folder placement instead of assuming that a successful SMTP transaction means inbox delivery.
- Use the provider’s replacement process if the VPS address has a bad reputation.
When a recipient rejects a message, read the returned diagnostic first. Fix DNS or authentication errors before changing application settings, and distinguish a local configuration problem from a recipient-policy block.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Back up the box before you need to restore it
Mail-in-a-Box’s backup system encrypts the data it stores. Backups can remain on the machine, be copied with rsync to another server, or be sent to Amazon S3 or an S3-compatible service such as DigitalOcean Spaces.
Safe backup procedure
- Enable the backup destination in the control panel and choose a location that is independent of the production VPS whenever possible.
- Set and record the encryption password or key.
- Store that key outside the mail server, such as in a separate password manager or offline record. A backup without its decryption key cannot be restored.
- Run a backup and confirm that the destination contains the expected encrypted data.
- Periodically perform a restoration test on a non-production machine or according to the project’s maintenance procedure.
Local copies help with quick recovery from an accidental change, but they do not protect against loss of the VPS itself. An off-box copy addresses that failure mode; a separately preserved key addresses the different failure mode of encrypted data that cannot be decrypted.
Rank #4
- MINI PC COMPUTER OFFICE LIGHT GAMING - GMKtec Nucbox G10 Series is equipped with the Ryzen 5 3500U, a 64-bit quad-core mid-range performance x86 mobile microprocessor. This processor is based on AMD's Zen+ microarchitecture and is fabricated on a 12 nm process. The 3500U operates at a base frequency of 2.1 GHz with a TDP of 15 W and a Boost frequency of 3.7 GHz. This APU supports up to 32 GB of dual-channel DDR4-2400 memory and incorporates Radeon Vega 8 Graphics operating at up to 1.2 GHz. 20% Multi-core Performance increase over previous Ryzen 3 models such as 4300U. 35% performance increase over the Intel N-series N95/N97/N150.
- RYZEN 5 3500U vs RYZEN 3 4300U COMPARISON - Why Choose Ryzen 5 3500U: Better multi-threaded performance: More threads, better suited for multitasking and demanding applications. Better graphics: With Vega 8, it's superior for casual gaming, video playback, and GPU-intensive tasks. Overall higher performance: Higher boost clock and better ability to handle a variety of workloads, from light gaming to productivity tasks. So, if you're looking for a more balanced processor with stronger multitasking capabilities and better GPU performance, the Ryzen 5 3500U would be the clear choice.
- 16GB DUAL CHANNEL DDR4 + 512GB SSD - Installed with DDR4 16GB SO-DIMM RAM Dual Channel (2x8GB) and a 512GB SSD, the Nucbox G10 mini pc supports memory expansion to 64GB RAM. Featured with Dual M.2 2280 PCIe 3.0 slots, supports dual storage slot expansion to 16TB SSD (2*8TB). (Upgrades not included) This model supports a configurable TDP-down of 12 W and TDP-up of 35 W.
- UNLEASH RAW PERFORMANCE MODE 25W - Dominate demanding tasks with the AMD Ryzen 5 3500U processor. When switched to Performance Mode in the BIOS (press "Esc" key repeatedly during boot, save then exit), this mini PC delivers superior multi-core processing power, significantly outperforming Intel N-series chips in CPU-intensive applications, multitasking, and creative workloads.
- MINI DESKTOP COMPUTER WITH TRIPLE DISPLAY SCREEN - Nucbox G10 integrates AMD Radeon Vega 8 1200 MHz GPU to deliver powerful graphics processing power to easily handle video editing, and playback, or casual gaming. And it can connect to 3 display screens simultaneously via HDMI 2.1 TMDS/ DPv1.4/ TYPE-C.
Move or restore a Mail-in-a-Box server
A migration changes both the machine and the DNS path, so plan for a propagation window. The maintenance procedure uses this order:
- Block non-SSH services on the old box so new changes do not arrive while the final copy is being made.
- Take a final encrypted backup and verify that the encryption key is available outside the old server.
- Provision the replacement machine according to the supported fresh-image requirements.
- Restore the backup to the new Mail-in-a-Box installation using the project’s maintenance instructions.
- Update DNS and any registrar glue records so the domain points to the new address and hostname.
- Allow DNS caches to expire and propagation to complete, then use the control panel’s status checks and send test messages.
Do not decommission the old box until the restored users, aliases, certificates, DNS records, and both inbound and outbound message paths have been verified.
Operate it as an appliance after installation
Mail-in-a-Box’s self-management is a feature, not an invitation to turn the server into a general-purpose application host. Avoid installing unrelated packages, replacing bundled services, or hand-editing generated configuration files. Such changes can be overwritten or can leave the system in a state the project does not support.
Recommended Free Tools
Use the project maintenance guide and release notes for upgrades, package changes, restores, and version-specific requirements. Before an upgrade, ensure that an encrypted off-box backup exists and that its key is retrievable. Review the current release information immediately before applying changes.
Troubleshoot by symptom
The installer refuses to proceed or services fail immediately
- Confirm that the operating system is Ubuntu 22.04 x64 and that the VPS was genuinely fresh.
- Remove conflicting preinstalled web, mail, DNS, or firewall software by reprovisioning a clean machine rather than trying to untangle an unknown configuration.
- Check the hostname and forward DNS before rerunning setup.
Outbound mail is rejected or disappears into spam
- Verify that port 25 is allowed by the provider and network.
- Check the VPS address’s reputation and request a replacement if necessary.
- Confirm forward DNS, reverse DNS, hostname alignment, SPF, DKIM, and DMARC.
- Read the recipient’s rejection or bounce text; a policy block at the receiving service may not be fixable on the box itself.
Clients cannot send or connect
- Use authenticated submission on port 465 or 587, not unauthenticated SMTP.
- Use IMAP 993 or POP 995 with TLS.
- Connect to the certificate’s hostname and verify that DNS resolves to the current address.
- Check the panel’s open-port and service-status tests.
HTTPS or mail certificates do not renew
- Make sure the hostname still resolves to the box and that DNS has not been left pointing at an old address.
- Confirm that HTTPS is reachable on port 443.
- Resolve DNS or hostname mismatches shown by the control panel before attempting renewal again.
When Mail-in-a-Box is the right choice
Choose it when you want a complete, automated mail appliance and are comfortable dedicating a VPS to that role. It bundles the surrounding services that a manual deployment would require you to select, configure, secure, and maintain separately.
Choose another architecture when you need extensive customization, want to share one server with unrelated applications, or cannot obtain a VPS address with usable SMTP and reverse-DNS support. Compare options on these dimensions:
Quick Recap
- Whether the system requires a fresh machine.
- How much configuration control it exposes.
- Whether webmail, calendar, spam filtering, and DNS are bundled.
- How encrypted backups and restoration are handled.
- What help exists for provider-level IP reputation and SMTP restrictions.
- How much maintenance is manual versus appliance-managed.
Final pre-launch checklist
- Fresh Ubuntu 22.04 LTS 64-bit VPS with a public address.
- Dedicated machine with no conflicting software.
- Provider confirmation that SMTP traffic is allowed.
- Reverse DNS set to the chosen hostname.
- Authoritative DNS delegation completed, or every panel-generated record copied to the external DNS host.
- MX, SPF, DKIM, DMARC, MTA-STS, and hostname records resolving correctly.
- HTTPS certificate issued and the panel’s status checks passing.
- Authenticated clients configured for ports 465/587, 993, or 995 as appropriate.
- Encrypted backup completed to an off-box destination.
- Encryption key preserved separately from the server.
- Test messages sent and received through external providers, with bounce responses monitored.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
