I don't want to be the party pooper, but without knowing too many details I can tell you that you're in for a bad time. You're essentially asking for abuse, as spammers will use your service to forward their junk, and whoever is hosting your service is going to receive abuse reports and act on them.
I've worked at a web hosting company before - not a major operation at a time, but we did enough business to staff one floor of an office building with our support and management people.
Something like 25%-50% of our support volume was spammers and scammers trying to sneak under the radar and get us to restore their service after we'd blacklisted them. A significant portion of these were using stolen credit cards.
Yes, sadly you are correct. I will do my best to monitor outbound SMTP frequency and blatant spam abuse, although so far it has been surprisingly pleasant. Thank you for the announcing this concern.
Yeah, but it still seems like a great service. This... versus the $5/mo to pay to DigitalOcean to host essentially nothing other than postfix & cyrus daemons... is quite reasonable. Please don't let the Spectre of Spammers discourage you from this very appealing old-school sort of venture...
Several comments are in regards to the issues surrounding the service, but I have to say, the service itself fills the niche need for anyone out there who is looking for a quick custom email solution.
When Google App stopped providing their free custom email service (which is fair enough), I asked a question here to see if there were any alternatives and basically there wasn't (there were a few similar ones, but not as convenient as what Google offered) - https://news.ycombinator.com/item?id=5179478
Of course there are issues I think that pawnmail needs to consider, but it definitely feels like this might be that alternative.
I don't understand the problem. Why is free so important? For $1/month you can get 5 email accounts with 2GB each at 1an1. If you go to $5/month, you can host your domain on Lunarpages and have unlimited email accounts. There are other services that offer similar possibilities at the same price points. With email accounts so cheap, why is free so important? Am I missing an obvious use case?
There is Zoho mail[1] - 1 domain, 10 users, 5Gb per user.
You can also try Yandex mail for domains[2] (1000 users and unlimited storage), but you will have to use Google translate to add domain - unlike mail itself, this pages are in Russian only[3].
Zoho mail is the closest free service you can find. Of course it has its own limitations but works well. I miss a lot of Google App features but it works well.
2) "we currently have enough funds to support 226 more days of hosting"
I know it's possible for 1 and 2 to not contradict each other, but it certainly gives the appearance of being a potentially unsustainable service, and thus a potentially unreliable service. If I'm going to set up an email hosting account, I'm going to want to expect it to be available for the long haul.
You're right, the wording is a bit humorous and certainly contradictory. I should rephrase the statements to say:
1) "free for as long as the service exists"
2) "we currently have enough funds to support 226 more days of hosting given that no one supports the server costs
Hosting a simple email service such as Pawnmail is cheaper than the cost of hosting many individual mail servers for each domain, so the incentive to donate exists as long as individuals and companies value the service. Being financially open is an attempt to fix the problem met by Google and Microsoft, who have suddenly discontinued their free custom domain email hosting services within the last year.
When investing (time) into something like this I always try to work out how the business is going to be sustained. Like many of us, I've been burnt badly before.
I'd genuinely like more businesses like this to be up front with commercial plans just to give reassurance to its customers.
What does HN use for multiple domain email hosting? I realize I can create an alias/forward to an inbox, but I'm looking for something that lets you send as multiple domains but maintain a single inbox without having the dreaded outlook "Sent from XXX on behalf of YYY".
I admire the philanthropic intent behind this, but last time I registered a domain with Gandi.net I got domain email included at no extra charge. It was way easier to set up than GA (or live.com before it went away).
Agree. If you have a domain, you presumably have web hosting, and it seems to be usual for this to come with mail. My hosting provider will host email for any domain (presumably works like pawnmail...) and it doesn't cost any extra. Now, if hosting were $50+/mo then I could see the value of a free service, but you can get it for $10/mo, where the tradeoff makes (to my mind) a lot less sense. After all, you want to pay for services like these, if only to ensure they don't suddenly stop in 226 days' time :)
My ex business partner would argue with me about this sometimes. "You always take the piss out of my daily coffee [which cost £2, mostly to pay for coffee shop overheads]", he'd say. "You're so tight. But you make us pay for hosting and email, like it's a good idea. We could use Google for free." I'd just shrug noncommittaly as I supped my tea [total cost about £0.03, mostly to pay for electricity]. How could he not see? Over time these free services always get rolled back, sometimes without any warning.
(Obviously that happened to Google Apps, or whatever. Maybe that was while we were working together... I don't remember. I wasn't really paying attention, because I didn't have to worry about it. That's what you pay for.)
It's very sweet and naive of you to offer this. There's a reason other people don't, and it's not because there aren't other nice people. It's because like another poster said, you're gonna get abuse as soon as more than a few people know about this. A lot of abuse.
I work for a hosting company, and one time we did a promotion where you could get a VPS for about a dollar for a month. This boosted our sales tremendously during the promotion, but all the boosted sales were abuse accounts and none of them renewed.
Thanks for providing this great service. Pardon me if this sounds ignorant, but won't other email providers like google, yahoo flag an email coming from @pawnmail.com as junk because of the word "pawn" (synonymous with pawn shops etc) in the domain name?
Junk/spam is far more complex than that. That alone will not be an issue almost certainly.
HOWEVER, there are many issues with this site that will cause messages to get marked as spam with a high frequency (including my innocuous test message to a gmail address).
1) There's no recommendation to setup SPF for your domain. This is the big one. SPF is a big deal, and not having any spf will give you a higher spam score.
2) The creator of this service did not setup a reverse dns entry for the ip to the mx domain. There's no reverse dns at all (even though he's hosted with ramnode and ramnode supports rdns).
3) The creator does not allow you to add dkim signing keys; you can't dkim sign your messages.
The above factors ensure that google has a high chance of marking you as spam, as well as any other sufficiently strict spam software. amavisd did not mark it as spam for me, giving it only a spam score of a little over 2, though I have mine configured at a high threshold compared to many people.
Because of the above reasons, I wouldn't consider using this. The lack of a rdns entry is especially unforgivable because it's so easy and helps with your spam rating so much. The other factors are all additional complexity because the owner of the domain (user) would have to do additional work beyond the dns record, but those should also be there.
Perhaps the creator will see this and improve these problems.
Only Pawnmail staff have @pawnmail.com email addresses. Domain owners can register email addresses under their own domain (such as @joesmith.com), which may or may not contain filtered words.
However, you have a good point. It would probably not be the ideal name for a service like to GMail, in which all users live under the @gmail.com domain.
This is awesome. Yes, the spam problems and everything but if this can be hosted somewhere more secure, and get a better SSL cert :) then it's a viable option for personal @yourdomain.com email. I would love to see a paid tier for when you outgrow the 2GB.
Is there an option to forward all of my mail to my gmail (preferably deleting the copy on pawnmail too)?
This is an interesting idea. I was going to set up an email server on my VPS with just SMTP that auto-forwarded everything to my gmail. But this might be simpler.
> I was going to set up an email server on my VPS with just SMTP that auto-forwarded everything to my gmail. But this might be simpler.
Do NOT do this. Unless you're willing to make absolutely sure that no spam gets through to gmail, you will be blacklisted by gmail when it flags spam coming from your host. And not even a lot of it.
Basically, to use gmail this way you have to be almost as good as gmail at the thing that most makes gmail worthwhile. It's not worth it. Much easier to go the other way.
Not yet, but this is a planned feature for the near future, along with a more detailed account management interface.
For the time being, you may take advantage of Gmail's POP3/IMAP support to download emails hosted on Pawnmail from Gmail. (See Google's article https://support.google.com/mail/answer/21289?hl=en) The emailed is pulled from Pawnmail rather than pushed, but it achieves the same effect.
That's because providing a service like this really sucks the life out of you. The theory was that we could either drive people towards the paying accounts, or monetize the accounts some other way.
The stats said - free accounts very rarely converted to paying accounts. All the monitizing options for people with free accounts are pretty creepy, even text-only ads were bad. We hated that.
So we turned off free accounts. FastMail only provides paid accounts, and in exchange we don't need to look for another business model - we take payment in exchange for providing an awesome service and everybody is happy.
... and per the estimated price of $0.30/yr for 2Gb storage - our costs are much higher than that. On the other hand we have 3 full copies of every email store, two in one datacentre and one in another - and each of them is on RAID1 SSD and RAID6 SATA, all encrypted - with enough CPU and RAM to work fast. Metadata and the current week's email is on SSD, the rest on SATA. There's a reason we're fast, and it's because people pay us enough to be able to invest in full time engineers working on optimising our usage of the hardware resources we have. Feel free to read the source code for our IMAP server at:
(or have a look at the git repository at git.cyrusimap.org where we are pushing many of our contributions back into the master branch in preparation for the public 2.5 release soon)
I feel no guilt at not offering free service. We provide value for money to our customers.
The difficulty is that it is often hard to use your favorite email account (gmail, icloud, exchange), and use your custom domain in the sent field. I have a few accounts that I really try to keep separate, so the hosting really does help.
[+] [-] kbar13|11 years ago|reply
There are mean people on the internet :(
[+] [-] zyxley|11 years ago|reply
I've worked at a web hosting company before - not a major operation at a time, but we did enough business to staff one floor of an office building with our support and management people.
Something like 25%-50% of our support volume was spammers and scammers trying to sneak under the radar and get us to restore their service after we'd blacklisted them. A significant portion of these were using stolen credit cards.
[+] [-] vortico|11 years ago|reply
[+] [-] jgwest|11 years ago|reply
[+] [-] nandhp|11 years ago|reply
Okay; Which jurisdiction?
[+] [-] vortico|11 years ago|reply
[+] [-] zz1|11 years ago|reply
[+] [-] sideproject|11 years ago|reply
When Google App stopped providing their free custom email service (which is fair enough), I asked a question here to see if there were any alternatives and basically there wasn't (there were a few similar ones, but not as convenient as what Google offered) - https://news.ycombinator.com/item?id=5179478
Of course there are issues I think that pawnmail needs to consider, but it definitely feels like this might be that alternative.
[+] [-] ternaryoperator|11 years ago|reply
[+] [-] Elhana|11 years ago|reply
You can also try Yandex mail for domains[2] (1000 users and unlimited storage), but you will have to use Google translate to add domain - unlike mail itself, this pages are in Russian only[3].
[1]http://www.zoho.com/mail/zohomail-pricing.html
[2]https://pdd.yandex.ru/domains_add/
[3]http://www.blogsynthesis.com/yandex-mail-setup-for-custom-do...
[+] [-] vidyesh|11 years ago|reply
[+] [-] spindritf|11 years ago|reply
[1] https://pdd.yandex.ru/domains_add/
[+] [-] vortico|11 years ago|reply
[+] [-] jawns|11 years ago|reply
2) "we currently have enough funds to support 226 more days of hosting"
I know it's possible for 1 and 2 to not contradict each other, but it certainly gives the appearance of being a potentially unsustainable service, and thus a potentially unreliable service. If I'm going to set up an email hosting account, I'm going to want to expect it to be available for the long haul.
[+] [-] vortico|11 years ago|reply
1) "free for as long as the service exists" 2) "we currently have enough funds to support 226 more days of hosting given that no one supports the server costs
Hosting a simple email service such as Pawnmail is cheaper than the cost of hosting many individual mail servers for each domain, so the incentive to donate exists as long as individuals and companies value the service. Being financially open is an attempt to fix the problem met by Google and Microsoft, who have suddenly discontinued their free custom domain email hosting services within the last year.
[+] [-] nmjohn|11 years ago|reply
[+] [-] sekasi|11 years ago|reply
I'd genuinely like more businesses like this to be up front with commercial plans just to give reassurance to its customers.
[+] [-] chrisan|11 years ago|reply
Is the only option to have multiple accounts?
[+] [-] fbueno|11 years ago|reply
[+] [-] bkeroack|11 years ago|reply
[+] [-] to3m|11 years ago|reply
My ex business partner would argue with me about this sometimes. "You always take the piss out of my daily coffee [which cost £2, mostly to pay for coffee shop overheads]", he'd say. "You're so tight. But you make us pay for hosting and email, like it's a good idea. We could use Google for free." I'd just shrug noncommittaly as I supped my tea [total cost about £0.03, mostly to pay for electricity]. How could he not see? Over time these free services always get rolled back, sometimes without any warning.
(Obviously that happened to Google Apps, or whatever. Maybe that was while we were working together... I don't remember. I wasn't really paying attention, because I didn't have to worry about it. That's what you pay for.)
[+] [-] tiatia|11 years ago|reply
[+] [-] jonlucc|11 years ago|reply
[+] [-] vortico|11 years ago|reply
[+] [-] l33tbro|11 years ago|reply
[+] [-] donniezazen|11 years ago|reply
Since they allow 10 users with each 5gb inbox that means I have 10 different inboxes that can be [email protected] or [email protected] or [email protected].
No custom url? Does that mean no custom domain allowed?
[+] [-] ebbv|11 years ago|reply
I work for a hosting company, and one time we did a promotion where you could get a VPS for about a dollar for a month. This boosted our sales tremendously during the promotion, but all the boosted sales were abuse accounts and none of them renewed.
Free or nearly free == here comes abuse.
[+] [-] deevus|11 years ago|reply
[+] [-] justboxing|11 years ago|reply
[+] [-] TheDong|11 years ago|reply
HOWEVER, there are many issues with this site that will cause messages to get marked as spam with a high frequency (including my innocuous test message to a gmail address).
1) There's no recommendation to setup SPF for your domain. This is the big one. SPF is a big deal, and not having any spf will give you a higher spam score.
2) The creator of this service did not setup a reverse dns entry for the ip to the mx domain. There's no reverse dns at all (even though he's hosted with ramnode and ramnode supports rdns).
3) The creator does not allow you to add dkim signing keys; you can't dkim sign your messages.
The above factors ensure that google has a high chance of marking you as spam, as well as any other sufficiently strict spam software. amavisd did not mark it as spam for me, giving it only a spam score of a little over 2, though I have mine configured at a high threshold compared to many people.
Because of the above reasons, I wouldn't consider using this. The lack of a rdns entry is especially unforgivable because it's so easy and helps with your spam rating so much. The other factors are all additional complexity because the owner of the domain (user) would have to do additional work beyond the dns record, but those should also be there.
Perhaps the creator will see this and improve these problems.
[+] [-] vortico|11 years ago|reply
However, you have a good point. It would probably not be the ideal name for a service like to GMail, in which all users live under the @gmail.com domain.
[+] [-] NicoJuicy|11 years ago|reply
[+] [-] jameshk|11 years ago|reply
[+] [-] digital-rubber|11 years ago|reply
Also people that care about their email, (should be/ are) willing to pay for it. Then again, people that care will most likely host their own.
[+] [-] Slix|11 years ago|reply
This is an interesting idea. I was going to set up an email server on my VPS with just SMTP that auto-forwarded everything to my gmail. But this might be simpler.
[+] [-] stormbrew|11 years ago|reply
Do NOT do this. Unless you're willing to make absolutely sure that no spam gets through to gmail, you will be blacklisted by gmail when it flags spam coming from your host. And not even a lot of it.
Basically, to use gmail this way you have to be almost as good as gmail at the thing that most makes gmail worthwhile. It's not worth it. Much easier to go the other way.
[+] [-] vortico|11 years ago|reply
For the time being, you may take advantage of Gmail's POP3/IMAP support to download emails hosted on Pawnmail from Gmail. (See Google's article https://support.google.com/mail/answer/21289?hl=en) The emailed is pulled from Pawnmail rather than pushed, but it achieves the same effect.
[+] [-] tedchs|11 years ago|reply
[+] [-] frdmn|11 years ago|reply
[+] [-] ForHackernews|11 years ago|reply
[+] [-] brongondwana|11 years ago|reply
The stats said - free accounts very rarely converted to paying accounts. All the monitizing options for people with free accounts are pretty creepy, even text-only ads were bad. We hated that.
So we turned off free accounts. FastMail only provides paid accounts, and in exchange we don't need to look for another business model - we take payment in exchange for providing an awesome service and everybody is happy.
... and per the estimated price of $0.30/yr for 2Gb storage - our costs are much higher than that. On the other hand we have 3 full copies of every email store, two in one datacentre and one in another - and each of them is on RAID1 SSD and RAID6 SATA, all encrypted - with enough CPU and RAM to work fast. Metadata and the current week's email is on SSD, the rest on SATA. There's a reason we're fast, and it's because people pay us enough to be able to invest in full time engineers working on optimising our usage of the hardware resources we have. Feel free to read the source code for our IMAP server at:
https://github.com/brong/cyrus-imapd/ in the fastmail branch.
(or have a look at the git repository at git.cyrusimap.org where we are pushing many of our contributions back into the master branch in preparation for the public 2.5 release soon)
I feel no guilt at not offering free service. We provide value for money to our customers.
[+] [-] tux|11 years ago|reply
[+] [-] frequentflyeru|11 years ago|reply
[+] [-] gprasanth|11 years ago|reply
[+] [-] chrisBob|11 years ago|reply
[+] [-] ForFreedom|11 years ago|reply