After the first post it’s pretty clear that some of you want a dedicated mail service where you won’t have the fear of having your email account deactivated.
There are a few rules surrounding the use of the mail server so I’ll outline them here.
- This can not be used for spam. Full stop. If I get angry emails from anyone about a user misusing the service to send spam I will terminate your account and blacklist your IP.
- For now, this will be restricted to full members only to reduce the possibility of misuse (Members with the “member” tag and up)
If you want to make an account here is what you need to provide:
- The name you want for your email
- Your intended use of the service
Reasons to use this service:
- Communicate with other scammer.info users in a secure and private way. I do not and will never have access to your email account or it’s contents.
- Report scams to the appropriate registrars and hosting providers in an anonymous way.
- Anything that is not spam.
Do I provide you the info on the private message? Also, do you have all this set up? I’m very curious about this. I appreciate your idea.
Yeah, It’s currently all setup. Flick me a Private Message if your interested and I will set up an account
Update 1:
I have opened up the mail web interface (mail.guidefox.org) for registered users without having to add your IP to a whitelist. Security has been boosted in that domain and will react to anything out of the ordinary.
Changing your password works perfectly and is no longer bugged.
Important: Please update your passwords for your email accounts as I have just discovered that I was using an insecure cipher set for that specific mail server.
I tried to change my password to zB4l9jae5u$wtek*At^FZjKVq5A0Cihsb^bqZIba (I am using this on every site I log in to btw, go try to log into my account rn it will totally work) but it just says “Can’t change password” or something.
Are you using the same system you used to change it before?
@anon47227696 raised some good questions around what is considered acceptable use for this service and encouraged me to share it here so everyone is aware.
UPDATE 2:
Updated spam filters with more robust rules.
Updated rules that prevent spammers from sending spoofed mail to other people.
Still looking into how I would have users’ emails auto-populate when trying to send emails to other users.
Suggestions and ideas are welcomed and encouraged.
Summary
Small update. postfixadmin.guidefox.org is now behind Cloudflare’s zero-trust firewall. What this means is you will need to enter your email address (the one you picked.)
You will then receive an email from Cloudflare with a 2FA code that you will need to enter in order to access the dashboard. Your session is good for 24 hours. This won’t affect your ability to log into your mail account - it’s only used to change your email password.
The benefits of this far outweigh the cons and help prevent brute-force attacks.
Outdated and no longer relevant!
Probably the biggest update so far.
I have moved the mail server to a separate server with its own dedicated IP address. The webmail interface can be accessed through mail.guidefox.org. Finally got around to adding an address book for other users to communicate easier without having to ask each other what their email addresses are.
You can finally change your password from the webmail interface without jumping through a bunch of hoops while doing a backflip.
You no longer need to enter a bunch of ports and addresses to connect to your account. You only need to enter your email address and password.
Still working on migrating received and sent emails to the new server - should be completed shortly.
2FA has been enabled for webmail.
And lots of other small changes.
This was something I dreamt of for a long time
Updated guide for connecting your account to your preferred mail client.
Mail App (Windows 10)
- Open up the mail app and select “Accounts”
- Select “Add Account” then select “Other account”
- Enter your email address and password - Fill the other field with what you want. (Messages will be sent with that name)
- Click “Sign in”
- Profit?
Mozilla Thunderbird
- Click “Local Folders” then click “Email” (Under “Set Up Another Account”)
- Enter your email, name, and password. Click “Continue”
- Select “IMAP” then select “Done”
- (Optional) Thunderbird lets you sync your emails contacts to your computer.
- After selecting “Done” select “Connect to a CardDAV address book”
- Under “Username” put your email address
- Under “Location” put “https://mail.guidefox.org/SOGo/dav/[email protected]/Contacts/370-62214780-5-56758A80/” and click “Continue”
- Under “Username” put your email address.
- Under “Password” put your password and click “Sign in”
- Under “Available address books” make sure “Global” is selected then click “Continue”
- You can now click “finish”
You can find the contacts book under “Address book” (top bar.) The addresses you just imported will be under “Global”
Prevented IP addresses from showing up when you send mail.
Old - Shows your IP
IP hidden
Another massive update. This is gonna be pretty lengthy so strap yourselves in!
Updates:
- Users who create new accounts are now required to change their passwords when they login.
- Anti-spam system is now intelligent. Reporting mail as spam teaches the system to mark similar mail as spam.
- A fully featured chat system has been integrated into the mail server.
- Calendar will now sync to your desktop mail applications.
- It is now possible to link other mail accounts (Gmail etc.) to your GuideFox accounts.
- Accessing your account with the wrong password 10 times will lock you out for an hour. This change was to prevent brute force attacks.
- You can now export all of your accounts data (Emails, Contacts, and Calendar)
- You can now blacklist a domain or email address.
- You can now share files with other users without having to send an email to them.
Here is a run down of all the changes mentioned above:
Password change required:
The chat system in action with emoji support:
Exporting your emails, contacts etc.
Blocking people from sending you mail:
That pretty much sums this up. There are other features but these are the main ones.
After a couple of days of thinking, rethinking and more thinking about what an email server needs, I have come up with and implemented something I think will work (finally). The issue with all the other attempts was that they did not have all of the features I needed to make this viable in the long run. After many days of searching, trying, and wiping the server I have managed to create a Frankenstein mix mash of Nextcloud, postfix, dovecot and other software.
The days of cumbersome features and bad looking UI’s are hopefully gone. It features a fully capable webmail client with integrated chat, calling, and video chats. A weather widget because why not 
all of which is encrypted (excluding emails - I’m still working on that.) Along with that there is a built in file sharing system so you can share files with other scambaiters and collaborate easier (Limited to 2gb of storage per user.) Fully functional desktop and mobile apps that sync your files to your computer that you can encrypt with your own key and then upload them (If you loose your passkey they are gone. There is no way to recover them.)
All of your accounts are intact and have been migrated over.
In the event that your account is compromised you will be notified through your @guidefox.org address. Furthermore, you can wipe any device connected to your account in the event that it is compromised (Any files that they had access to will be gone and their access revoked.)
I think that about covers it. Let’s have a look at the interface.
Front Page:
Files:
Sharing:
Files but with photos:
Chat interface:
Email client:
Settings page:
If there is anything missing that you would like to see please let me know and I will see what I can do.
Update:
Removed senders IP address and user agents from email source when sending emails.
Added ransomware protection for uploading files to the server.
Passwords are now checked against a list of known password breaches and if found are prevented from using that password (via haveibeenpwned.)
Password length requirement is 10 characters or more and must consist of upper and lower case letters, numbers, and special characters
Also, speaking of this, I keep meaning to log in to the mail provider but never get around to it. However, the domain hasn’t been working lately.
