Mail-in-a-box

mailinabox.email
Mail-in-a-box

Easy-to-deploy fully-featured and pre-configured SMTP mail server. It includes everything from webmail, to spam filtering and backups.

Open Source

Mail-in-a-box Source Code

Author

mail-in-a-box

Description

Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box.

#email#mail#server#smtp

Homepage

https://mailinabox.email/

Repository

  • LicenseCC0-1.0
  • Created21 Aug 13
  • Primary languagePython
  • Size3,861 KB
  • Stars15,389
  • Forks1,547
  • Watchers15,389

Language Usage

Language Usage

Project Health

  • Last commit2 months ago
  • Open issues613
  • Latest releasev76

Recent Commits

  • Joshua Tauberer(24 May 26)

    v76

  • Joshua Tauberer(24 May 26)

    Set Nextcloud appstoreenabled setting to false Updated php-fpm settings broke Nextcloud. See: https://discourse.mailinabox.email/t/problems-with-z-push-and-nextcloud-likely-after-package-updates-today/16460/21

  • Nils Norman Haukås(23 May 26)

    Bugfix management interface HTML (#2574) * bugfix: don't display management interface internals on frontpage * nitpick: remove trailing whitespace fixes #2572

  • Joshua Tauberer(20 Apr 26)

    Version 75 (April 20, 2026) * Updated Roundcube to 1.6.15, fixing a security vulnerability. * Fixed error when configuring S3 backups on empty buckets. * Fixed issue in management daemon name resolution. * Fixed accessibility issues in the control panel.

  • Kevin(08 Apr 26)

    Fix KeyError when configuring S3 backups on empty buckets (#2548) Adding a guard so that if the user uses a brand new S3 bucket with no contents a KeyError is not received when configuring backups.

  • Tim in 't Veld(08 Apr 26)

    Accessibility: index: aria-expanded on dropdown menu buttons, aliases: fieldset on permitted senders, mfa: fix incorrect id's and alt on qr code (#2555) * accessibility: aria-expandedon dropdowns, fieldset on aliases > permitted senders, mfa label corrections and alt on qr image * further change

  • David Jäckel(08 Apr 26)

    Fix issue in management daemon name resolution (#2561) In some scenarios localhost resolves to the external ip. Adapted management daemon to reflect check performed in `start.sh`

  • Tim in 't Veld(08 Apr 26)

    Accessibility: improve table semantics and ARIA usage (#2553)

  • jcm-shove-it(08 Apr 26)

    Update roundcube to 1.6.15 (#2565)

  • Tim in 't Veld(01 Feb 26)

    Fix critical accessibility bug in control panel modals (#2551) - Removed `aria-hidden="true"` from the `global_modal` div. This attribute was set but not updated, causing screen readers to ignore the modal even when it was open. Bootstrap sets and modifies `aria-hidden` automatically, so the correct approach is not to set it manually. - The `global_modal` div has `role="dialog"` (correct) but lacked `aria-modal="true"`. The ARIA specification recommends setting this attribute to ensure screen readers know that focus is (and should be) trapped in the modal. I added it. - Removed `aria-hidden="true"` from the close button. This button can receive keyboard focus, so it should have an accessible name. If it is hidden, a screen reader user experiences focus on an unnamed element, which is confusing. - Added `aria-label="Close Dialog"` to the close button. The visible label `×` does not describe the button’s function, but the new ARIA label does.

  • Joshua Tauberer(04 Jan 26)

    v74

  • KiekerJan(02 Jan 26)

    Update Nextcloud filter for fail2ban (#2539)

  • KiekerJan(02 Jan 26)

    update roundcube to 1.6.12 (#2546)

  • matidau(28 Jul 25)

    Update zpush.sh to version 2.7.6 (#2529)

  • SE(28 Jul 25)

    Fix mozilla-autoconfig.xml (#2528) Fixes the Thunderbird auto configuration due to use of a <domain purpose="mx"> which is informational and may be ignored.

  • ukfhVp0zms(21 Jul 25)

    Fix broken links for scp and DAV (#2522) * Update web.html: Update broken SCP man page link * Update sync-guide.html: Remove non-existing Android CalDAV and CardDAV apps from selection

  • Joshua Tauberer(11 Jul 25)

    v73

  • Joshua Tauberer(20 Jun 25)

    Add --allow-releaseinfo-change to the first main apt-get update because ppa:ondrej/php changed its Label I got: ``` Updating system packages... FAILED: apt-get update ----------------------------------------- Hit:1 http://archive.ubuntu.com/ubuntu jammy InRelease Hit:2 http://archive.ubuntu.com/ubuntu jammy-updates InRelease Hit:3 http://archive.ubuntu.com/ubuntu jammy-backports InRelease Hit:4 http://security.ubuntu.com/ubuntu jammy-security InRelease Hit:5 https://ppa.launchpadcontent.net/duplicity-team/duplicity-release-git/ubuntu jammy InRelease Get:6 https://ppa.launchpadcontent.net/ondrej/php/ubuntu jammy InRelease [24.6 kB] Reading package lists... E: Repository 'https://ppa.launchpadcontent.net/ondrej/php/ubuntu jammy InRelease' changed its 'Label' value from '***** The main PPA for supported PHP versions with many PECL extensions *****' to 'PPA for PHP' ```

  • Joshua Tauberer(16 Feb 25)

    Use `utils.shell("check_call", ...)` rather than subprocess.call directly

  • Joshua Tauberer(28 Jul 24)

    Add disabled code to log failed commands to stderr

  • Joshua Tauberer(28 Jul 24)

    Add `management/dns_update.py --update` as an alternative to tools/dns_update.py that runs without the backend

  • KiekerJan(08 Jul 25)

    fix SOA record check against secondary dns (#2507)

  • KiekerJan(02 Jul 25)

    Remove ssl stapling from nginx configuration (#2520)

  • KiekerJan(20 Jun 25)

    Add check on backup to status checks (#2508)

  • MrWinux(20 Jun 25)

    Add Configuration to Handle AWS SDK Checksum Changes for Third-Party S3-Compatible Services (#2490) fix: MissingContentLength error in boto3 version 1.36.1 and up

  • Teal Dulcet(20 Jun 25)

    Updated autoconfig file to include POP3 and CardDAV/CalDAV (#2499) Co-authored-by: Ben Bucksch <[email protected]>

  • Jeff Tickle(20 Jun 25)

    Remove extraneous use of sudo from /etc/cron.d/mailinabox-nextcloud (#2500)

  • Joshua Tauberer(20 Jun 25)

    Merge pull request #2473 from tdulcet/python-linting Added config file for the Ruff Python linter and fixed additional errors

  • Teal Dulcet(18 Jun 25)

    Fixed RUF005 (collection-literal-concatenation): Consider iterable unpacking instead of concatenation

  • Teal Dulcet(18 Jun 25)

    Fixed RET505 (superfluous-else-return): Unnecessary `elif` after `return` statement

Mail-in-a-box Security

5.1/10

Repo Security Summary

Updated 27 Jul 26

  • Dangerous-WorkflowN/A
  • PackagingN/A
  • Maintained5/10
  • Code-Review6/10
  • Token-PermissionsN/A
  • Binary-Artifacts10/10
  • Security-Policy10/10
  • CII-Best-Practices0/10
  • Pinned-DependenciesN/A
  • Fuzzing0/10
  • License10/10
  • Signed-ReleasesN/A
  • Branch-Protection3/10
  • SAST0/10

Mail-in-a-box Website

Website

Mail-in-a-Box

Take back control of your email with this easy-to-deploy mail server in a box.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address94.76.202.152
  • Hostnamebox.occams.info
  • LocationReading,England,United Kingdom of Great Britain and Northern Ireland,EU
  • ISPTeam Blue Carrier Limited
  • ASNAS29550

Associated Countries

  • USUS
  • GBGB

Safety Score

Website marked as safe

100%

Blacklist Check

mailinabox.email was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

Mail-in-a-box Reviews

More Mail Servers

About the Data: Mail-in-a-box

Edit Mail-in-a-box Data

You can edit Mail-in-a-box's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

API

You can access Mail-in-a-box's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/mail-in-a-box

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Mail-in-a-box

Help your friends compare Mail Servers, and pick privacy-respecting software and services.
Share Mail-in-a-box and Awesome Privacy with your network!