Mail and webmail
In preview
Postfix, Dovecot and Rspamd configured as one unit, with DKIM keys made on the server and every record a mail domain needs published into its DNS zone.
Built and lab-tested
- Mail domains, mailboxes with quotas, aliases, forwarders that can keep a copy, catch-all addresses and autoresponders.
- DKIM keys generated on the mail server; the private key never enters the database, logs or events. Two-step key rotation, and ARC sealing for forwarded mail.
- MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, autoconfig and autodiscover records published into the domain's zone automatically.
- Submission on ports 587 and 465 requires the login to match the sender. Open relay is refused, and senders can be held or blocked from sending.
- Queue control: list, hold, release, retry, delete and flush.
- Every configuration is checked with
postfix check,doveconfandrspamadm configtestbefore it goes live; the previous files come back on any failure. - Webmail gateway: threaded conversations, search with operators (from:, has:attachment, before:), send with an undo window, Sieve rules, vacation replies and live updates over IMAP IDLE.
- Incoming HTML is rebuilt from an allow-list. Remote images and tracking pixels are blocked by default. The sanitiser is tested against about 55 XSS vectors and a fuzzer.
Coming soon
- The RespireCloud mail client screens, in the panel and the mobile app.
- Contacts and calendars (CardDAV and CalDAV), scheduled send and snooze.
- DMARC report charts, a deliverability checker and a transactional sending API.
- ClamAV scanning of mail, app passwords and POP3.
Dedicated screens for this area are being built on the RespireCloud design system. Today every action has a generated form in the panel, is one keystroke away in the command palette (Ctrl K), and is callable through the API.