--- title: "MailCow email server on a VPS: antispam and why port 25 matters | StreetHosting" description: "A practical look at MailCow on your own server: MX, TLS, antispam, reputation and why outbound SMTP port 25 is blocked, with an authenticated relay on port 587." url: "https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps" type: "page" language: "en-US" --- Infrastructure · 4 min · Advanced Published on May 19, 2026 · Updated on May 20, 2026 # MailCow, antispam and responsible email sending MailCow makes running your own email easier, but the result depends on correct DNS, sending reputation and network security policy. In many hosting environments, outbound port 25 is restricted to reduce abuse, while legitimate sending goes through an authenticated relay. Understanding that difference prevents lost deliveries and needless blocks. By [Equipe StreetHosting](https://streethosting.com.br/en/autores#equipe-streethosting) · StreetHosting infrastructure and support team [Hardware and datacenter](https://streethosting.com.br/en/guides/topics/hardware) Summarize with: [](https://chat.openai.com/?q=Summarize%20the%20key%20points%20of%20this%20StreetHosting%20guide%3A%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fmailcow-email-server-vps.%20Highlight%20the%20step-by-step%20instructions%2C%20the%20prerequisites%20and%20the%20most%20common%20mistakes. "ChatGPT") [](https://claude.ai/new?q=Summarize%20the%20key%20points%20of%20this%20StreetHosting%20guide%3A%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fmailcow-email-server-vps.%20Highlight%20the%20step-by-step%20instructions%2C%20the%20prerequisites%20and%20the%20most%20common%20mistakes. "Claude") [](https://www.google.com/search?udm=50&aep=11&q=Summarize%20the%20key%20points%20of%20this%20StreetHosting%20guide%3A%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fmailcow-email-server-vps.%20Highlight%20the%20step-by-step%20instructions%2C%20the%20prerequisites%20and%20the%20most%20common%20mistakes. "Google AI Mode") [](https://x.com/i/grok?text=Summarize%20the%20key%20points%20of%20this%20StreetHosting%20guide%3A%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fmailcow-email-server-vps.%20Highlight%20the%20step-by-step%20instructions%2C%20the%20prerequisites%20and%20the%20most%20common%20mistakes. "Grok") [](https://www.perplexity.ai/search/new?q=Summarize%20the%20key%20points%20of%20this%20StreetHosting%20guide%3A%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fmailcow-email-server-vps.%20Highlight%20the%20step-by-step%20instructions%2C%20the%20prerequisites%20and%20the%20most%20common%20mistakes. "Perplexity") Share: [](https://x.com/intent/tweet?text=MailCow%20email%20server%20on%20a%20VPS%3A%20antispam%20and%20why%20port%2025%20matters&url=https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fmailcow-email-server-vps "Share on X") [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fmailcow-email-server-vps "Share on Facebook") [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fmailcow-email-server-vps "Share on LinkedIn") [](https://wa.me/?text=MailCow%20email%20server%20on%20a%20VPS%3A%20antispam%20and%20why%20port%2025%20matters%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fmailcow-email-server-vps "Share on WhatsApp") For agents: Copy as Markdown [.md](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps.md) In this guide 5 sections * [What MailCow solves](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#o-que-mailcow-resolve) * [DNS: SPF, DKIM and DMARC](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#dns-spf-dkim-dmarc-sem-atalhos) * [Antispam, reputation and lists](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#antispam-reputacao-e-listas) * [Port 25, relay and StreetHosting policy](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#porta-25-relay-e-politica-street) * [Secure operation and LGPD](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#operacao-segura-e-lgpd) Quick answer **MailCow** brings the classic email components together in a single panel and speeds up deployment. The hard part is not installing it, but keeping good deliverability over time. That takes consistent DNS, domain reputation, protection against account abuse and a correct SMTP sending policy. At many providers, outbound **port 25** is blocked for direct traffic and legitimate sending goes through an **authenticated relay on port 587**. Planning for that from the start saves rework in production. ## What MailCow solves[](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#o-que-mailcow-resolve) MailCow is a good option for a team that needs to control mailboxes, domains and policies without assembling every service by hand. You get speed in creating accounts, aliases and filters, plus centralized administration. The limitation is that it does not solve sending reputation and access governance on its own. For projects that require physical isolation, consider [StreetHosting dedicated servers](https://streethosting.com.br/en/dedicated). * A single panel for day-to-day operational tasks. * Management of multiple domains with per-user quota policies. * Integration with a local antispam filter and external support tools. ## DNS: SPF, DKIM and DMARC[](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#dns-spf-dkim-dmarc-sem-atalhos) SPF says who may send on behalf of your domain, DKIM signs the message and DMARC sets the policy for what happens when something fails. The most common mistake is moving the IP or relay and forgetting to update SPF. The result: the email seems to go out, but it lands in spam or gets partially blocked at the larger providers. Always validate SPF, DKIM and DMARC after a DNS change and record the result so you have something to compare against when deliverability drops. ## Antispam, reputation and lists[](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#antispam-reputacao-e-listas) Email reputation is built over time. It does not depend only on the software, but on list quality, sending frequency and complaint rate. MailCow helps with local operation, but if the contact base is outdated or has no consent, the domain loses trust within a few cycles. | Signal | Interpretation | Action | | --------------------- | ------------------------------------ | ------------------------------------------------ | | 550 bounce for policy | Authentication or reputation failure | Review SPF, DKIM and list hygiene | | Temporary deferral | Rate control at the destination | Keep retrying and reduce volume per batch | | High spam score | Suspicious content, domain or IP | Adjust the template, segment and warm up sending | ## Port 25, relay and StreetHosting policy[](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#porta-25-relay-e-politica-street) Port 25 is used for transit between mail servers, but it is also the first target of abuse when a machine is compromised. That is why many environments control or block direct outbound traffic on this port. In a legitimate operation, the usual path is authenticated submission on **587 with STARTTLS** or **465 with TLS**, through a trusted relay. For anyone running commercial lists, the decision usually looks like this: low, predictable volume can work on a well-maintained own setup; high or seasonal volume tends to work better with a specialized relay that already has an established reputation. In either model, combine access control and host hardening with [secure SSH](https://streethosting.com.br/en/guides/vps/secure-ssh-linux-vps) and [UFW firewall](https://streethosting.com.br/en/guides/vps/ufw-firewall-ubuntu-vps) rules when MailCow runs on your own VPS. Trying to get around a port block with an unauthorized tunnel usually leads to service suspension and makes your domain's reputation worse. ## Secure operation and LGPD[](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#operacao-segura-e-lgpd) Email usually stores personal data and sensitive documents, so secure operation needs a retention policy, access control and an audit trail. In practice, leaks happen more because of weak passwords, reused credentials and a lack of MFA than because of a critical flaw in the MTA. If you are unsure between a VPS and dedicated hardware for the mail service, read [when to use a dedicated server](https://streethosting.com.br/en/guides/infrastructure/when-to-use-a-dedicated-server). As a middle option, take a look at [StreetHosting Ryzen VPS](https://streethosting.com.br/en/vps/ryzen). * Review SPF, DKIM and DMARC after every change to the sending route. * Run a mailbox backup and a restore test in a defined window. * Apply a per-user sending limit to reduce the impact of a hijacked account. * Monitor certificate validity and the delivery queue daily. In this guide * [What MailCow solves](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#o-que-mailcow-resolve) * [DNS: SPF, DKIM and DMARC](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#dns-spf-dkim-dmarc-sem-atalhos) * [Antispam, reputation and lists](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#antispam-reputacao-e-listas) * [Port 25, relay and StreetHosting policy](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#porta-25-relay-e-politica-street) * [Secure operation and LGPD](https://streethosting.com.br/en/guides/infrastructure/mailcow-email-server-vps#operacao-segura-e-lgpd) ## Frequently asked questions Is MailCow plug and play on any VPS? Installing the UI is easy; reaching a stable inbox placement at the big public providers takes IP warm-up, low bounce rates and mature DNS support. A serious corporate project should evaluate a provider that specializes in transactional email. Why block outbound port 25? Spam bots exploit compromised VPS instances to fire off millions of messages. Blocking port 25 at the edge reduces mass abuse without preventing authenticated SMTP submission on 587 or 465, depending on your configuration. Can I use MailCow for internal mail only? Yes, on a LAN or VPN, but external delivery still depends on reputation and consistent public DNS records. Do I need a clean dedicated IP? Highly desirable. A dirty IP inherits the previous spam history and takes months of warm-up to recover. Next step See dedicated servers Exclusive hardware in São Paulo with NVMe and Anti-DDoS. [See dedicated servers](https://streethosting.com.br/en/dedicated) [See Ryzen VPS Ryzen 9 9950X VPS in São Paulo with root access, NVMe and gamer Anti-DDoS.](https://streethosting.com.br/en/vps/ryzen) ## Related guides [Infrastructure Intermediate When to use a dedicated server: moving from a VPS to bare metal A dedicated server makes sense when predictable performance and physical isolation matter more than the flexibility of a VPS. The decision usually comes up with continuous workloads, compliance requirements, heavy I/O or specific licensing. With clear criteria, the migration lowers risk and avoids unnecessary cost. 4 min Read guide](https://streethosting.com.br/en/guides/infrastructure/when-to-use-a-dedicated-server) [VPS Intermediate How to secure SSH on a Linux VPS: keys, passwords, fail2ban SSH is usually the first target on any VPS with a public IP. This guide walks through a practical routine that cuts the risk without complicating your day: an ED25519 key, password-free login, admin access through sudo, blocking of automated attempts and a periodic review of authorized keys. 4 min Read guide](https://streethosting.com.br/en/guides/vps/secure-ssh-linux-vps) [VPS Beginner UFW on Ubuntu VPS: firewall rules without losing SSH UFW makes the Ubuntu firewall simpler, but one rule in the wrong order locks you out of your VPS. Learn how to enable it without losing SSH, open only what you need, deal with Docker, and get back in through the console if something goes wrong. 10 min Read guide](https://streethosting.com.br/en/guides/vps/ufw-firewall-ubuntu-vps) [← Back to the Guide Center](https://streethosting.com.br/en/guides)