NoctisNode
GuidesMail25 min

Private mail relay with Postfix & DKIM

Outbound-only mail relay on your own IP with SPF, DKIM and DMARC — rDNS that doesn't shout 'VPS'.

Sending mail from a clean, static IP you control — with rDNS you set yourself — is the difference between the inbox and the spam folder. NoctisNode gives you both: clean IP space and rDNS control from the panel.

Outbound-only Postfix

Binding to loopback means nothing on the internet can use your server as an open relay. Local services submit mail to 127.0.0.1:25.

# /etc/postfix/main.cf
myhostname = mail.example.com
myorigin = example.com
inet_interfaces = loopback-only
mydestination =
relayhost =

DKIM with OpenDKIM

opendkim-genkey -b 2048 -d example.com -s mail
# publish mail._domainkey.example.com TXT record, then:
systemctl enable --now opendkim

DNS records

  • SPF: v=spf1 ip4:<your-ip> -all
  • DMARC: v=DMARC1; p=quarantine; rua=mailto:[email protected]
  • rDNS: set the PTR to mail.example.com in the NoctisNode panel — matching forward and reverse DNS is what big providers check first.