Global Email management

Install or repair the mail stack

Before installation, create DNS-only A/AAAA records for the mail and webmail hostnames, allow inbound ports 25, 465, 587, and 993, confirm outbound port 25 is permitted, and configure the public IP's PTR record. Let's Encrypt must be able to validate both hostnames.

Core Panel installs and manages Postfix, Dovecot, Rspamd, Redis, DKIM/ARC signing, PostSRSd, ClamAV, Fail2ban, TLS, and webmail. Debian-family systems use SOGo groupware; supported RPM-family systems use Roundcube. Use Repair mail stack after an operating-system upgrade or when Core Panel detects a managed-service configuration problem.

Overview

Review mail and webmail service status, open webmail, and copy groupware sync endpoints. On SOGo, shared calendars, address books, CalDAV, CardDAV, and optional ActiveSync are available.

Mail domains

Add an eligible hosted website as a final mail destination, review mailbox and alias counts, open its account-management page, or remove routing. Removing a domain stops delivery but retains existing Maildir data for recovery.

Required DNS

Review and verify the mail-host A/AAAA, MX, SPF, DKIM, DMARC, submission SRV, IMAPS SRV, and PTR requirements. Keep a Cloudflare-hosted mail hostname DNS-only.

Delivery and sync

Configure outbound delivery behavior and optional SOGo ActiveSync. Use Delivery diagnosis to test outbound SMTP connectivity, inspect current queue and log evidence, and receive a specific recovery action.

Spam management

Add exact sender-address or whole-domain allow and block rules. Block rules add a reject-level Rspamd score. Allow rules lower the spam score but never bypass antivirus. Delivered spam is placed in the Junk folder; messages over the reject threshold and detected viruses are rejected during SMTP.

Delivery queue

Inspect queued messages, preview bounded message content, retry or delete one item, retry all delivery, or empty the complete queue. Emptying the queue permanently removes its message contents.

Mail backups

Create, import, download, restore, and delete encrypted mail backups. Configure an automatic interval, retention count, and optional mounted remote destination below /mnt , /media , or /srv/backups .

Mail archives include Maildir data, managed configuration, and supported SOGo groupware state. Keep the server's mail-backup encryption key in disaster-recovery escrow; archives cannot be decrypted without it. Restore validates the archive and can replace current mail configuration and mailbox files.

Mail backups provide workload-level recovery and are separate from the panel-wide disaster-recovery bundles configured under System Settings > Panel recovery. Continue exporting encrypted mail backups when a mail-only restore is required.

Mail logs

Review the latest 100 bounded entries across delivery, filtering, antivirus, and webmail services. Use the exact Postfix/Rspamd/Dovecot reason together with Delivery diagnosis when troubleshooting.