Hacker ApprovedDepartments

Postfix

Hacker Approved

Ranked 2 of 9 mail servers by recommenders

Long-running, low-maintenance mail transfer agent that people run on small VPSes alongside Dovecot, with a strong security record. Critics say its configuration is painful.

Long-running, low-maintenance mail transfer agent that people run on small VPSes alongside Dovecot, with a strong security record. Critics say its configuration is painful.

26 people gave an opinion

recommend it
21
criticize it
5
approval share
81%
Each figure is one person. RecommendsCriticizes

Recommended in 9 of 13 months

  1. November 2025: not recommended
  2. December 2025: recommended
  3. January 2026: not recommended
  4. February 2026: not recommended
  5. March 2026: recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: recommended
  11. September 2026: recommended
  12. October 2026: recommended
  13. November 2026: not recommended (month in progress)

Owned for 22 years

Median of the 4 owners who said how long they have had it.

Each square is one year.

Why it carries the badge

  • 21 people recommend itNeeds 10 or more, met.
  • 4.2 recommenders for every criticNeeds 2 to 1 or better, met.
  • Recommended in 9 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Almost no maintenance once set up

    “Absolutely zero maintenance has been required since I set it up”

    Comment from 25 Jul 2026 in “Self-host your mail server”

    “Mine has been running smoothly for over a decade.”

    Comment from 19 Dec 2025 in “Ask HN: Running your own email service?”

    “There is basically no ongoing maintenance at all.”

    Comment from 16 Oct 2026 in “What I self-host”
  • Pairs well with Dovecot

    “My email (postfix and dovecot) ... all comfortably run in 1gb of ram”

    Comment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

    “he could easily just throw up a postfix+dovecot on some VPS”

    Comment from 5 Apr 2026 in “Sad Story of My Google Workspace Account Suspension”

    “postfix+dovecot+rspamd is enough”

    Comment from 26 Jul 2026 in “Self-host your mail server”
  • Strong security track record

    “Postfix has a record of no root/RCE in the default install”

    Comment from 30 May 2026 in “Openrsync: A BSD-licensed implementation of rsync, by the OpenBSD team”

    “Postfix has a far better security track record.”

    Comment from 16 May 2026 in “Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim”
  • Small footprint, no database needed

    “My email (postfix and dovecot) ... all comfortably run in 1gb of ram”

    Comment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

    “I'm very very glad there's no database requirement.”

    Comment from 12 May 2026 in “Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim”

What people warn about

Each mark is one comment

  • Configuration is convoluted and painful

    “This seems like a convoluted way of adding a new header, at least compared to the http servers I know.”

    Comment from 2 Nov 2025 in “Stop 'reactions' to email by adding a postfix header (2024)”

    “instead of suffering through postfix”

    Comment from 22 Feb 2026 in “Be Wary of Bluesky”

Other mail servers people recommend

The four most recommended other mail servers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Postfix compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
Stalwart Mail Server27487%103 mo3 ownersApproved
PostfixThis page21581%922 yrs4 ownersApproved
Dovecot18195%1115 yrs4 ownersApproved
qmail15575%10—Approved
mailcow15194%72 yrs5 ownersApproved
See all 9 mail servers, ranked

What people said

25 of the 30 comments that mention it, newest first. Each links to the original comment.

“those didn't need a ton of patching over time”

RecommendsComment from 24 Oct 2026 in “Sam Altman: 'I No Longer Think We're Gonna Be Able to Just Patch All the Bugs'”

“works great and not dependent on isp rules”

RecommendsComment from 16 Oct 2026 in “What I self-host”

“There is basically no ongoing maintenance at all.”

RecommendsComment from 16 Oct 2026 in “What I self-host”

“Totally worth it to automate archiving and cut down on spam.”

RecommendsComment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

“My email (postfix and dovecot) ... all comfortably run in 1gb of ram”

RecommendsComment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

“I've done exactly this + DKIM & DMARC on a residential IP”

MixedComment from 27 Sep 2026 in “When did Google get so weird?”

“Take sendmail vs postfix as an example of this process.”

RecommendsComment from 9 Sep 2026 in “Playing whack-a-mole is losing”

“postfix+dovecot+rspamd is enough”

RecommendsComment from 26 Jul 2026 in “Self-host your mail server”

“Absolutely zero maintenance has been required since I set it up”

RecommendsComment from 25 Jul 2026 in “Self-host your mail server”

“I would highly recommend against doing it!”

CriticizesComment from 24 Jul 2026 in “Self-host your mail server”

“I use Postfix and Dovecot”

RecommendsComment from 16 Jun 2026 in “Apple is about to make Hide My Email useless”

“Postfix can easily be configured to allow my user to send from other addresses”

RecommendsComment from 10 Jun 2026 in “Lies We Tell Ourselves About Email Addresses”

“Postfix has a record of no root/RCE in the default install”

RecommendsComment from 30 May 2026 in “Openrsync: A BSD-licensed implementation of rsync, by the OpenBSD team”

“Postfix has a far better security track record.”

RecommendsComment from 16 May 2026 in “Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim”

“I use Postfix with MySQL, what is the issue with that?”

RecommendsComment from 13 May 2026 in “Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim”

“I'm very very glad there's no database requirement.”

RecommendsComment from 12 May 2026 in “Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim”

“there is no reason to run a memory-unsafe MTA”

CriticizesComment from 12 May 2026 in “Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim”

“switching to Postfix massively improved my sleep quality”

RecommendsComment from 12 May 2026 in “Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim”

“he could easily just throw up a postfix+dovecot on some VPS”

RecommendsComment from 5 Apr 2026 in “Sad Story of My Google Workspace Account Suspension”

“These are all mature solutions that are free of vendor lock-in”

RecommendsComment from 24 Mar 2026 in “Apple Business”

“instead of suffering through postfix”

CriticizesComment from 22 Feb 2026 in “Be Wary of Bluesky”

“it still feels like adding unneeded”

CriticizesComment from 19 Dec 2025 in “Postfix Macros and Let Place”

“Mine has been running smoothly for over a decade.”

RecommendsComment from 19 Dec 2025 in “Ask HN: Running your own email service?”

“Postfix has also fared well”

RecommendsComment from 19 Dec 2025 in “The state of the kernel Rust experiment”

“This seems like a convoluted way of adding a new header, at least compared to the http servers I know.”

CriticizesComment from 2 Nov 2025 in “Stop 'reactions' to email by adding a postfix header (2024)”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.