Beta — tested on Debian 12 & 13, feedback welcome
The panel that puts you back in control of your mail.
Postfix · Dovecot · Rspamd, on Debian 12 & 13, in one panel. DNS advice with live verification, per-domain DKIM keygen, granular backup with per-mailbox restore, mail queue management, certificate lifecycle, vacation auto-reply. Boring stack done right — built for small VPS, Raspberry Pi, and Proxmox homelabs.
Free for personal and non-commercial use — home labs, learning, self-hosting your own mail. Commercial deployments (paying clients, for-profit production) require a NetForge license — see the terms.
The panel in a minute
Why missus
DNS advice that verifies itself
For each managed domain, missus shows the exact MX, SPF, DKIM,
and DMARC records to publish — and a one-click Verify all
that runs live dig lookups and tells you which
records are actually live. Stop guessing why Gmail spam-folders
your mail.
Boring stack, modern UX
Postfix and Dovecot have 25 years of sysadmin knowledge in the
world. Rspamd is the modern anti-spam standard. missus assembles
them with sane defaults + a panel that doesn't hide what's
happening. Every config file is generated under
/srv/missus/ for you to read.
Pi & homelab first-class
No Docker, no Java, no kitchen-sink. ~300 MB resident across the
three daemons — fits comfortably on Pi 4/5 with 4 GB RAM and an
SSD. Ships as a self-contained .deb for Debian 12 &
13, amd64 + arm64. Proxmox LXC template on the way.
How mail flows through missus
Two lanes — inbound (the world reaching your mailboxes) and outbound (your mailboxes reaching the world). Same three daemons, same SQLite store, no extra moving parts. Each blue-bordered box is something the panel renders config for and you can read on disk.
The chosen stack
What you get out of the box
DNS advice + live verification
For every managed domain: the canonical MX/SPF/DKIM/DMARC
records ready to copy-paste, hostname & IP pulled from
your server settings. Verify all runs
dig against your authoritative DNS and tells
you exactly which records resolve correctly, which are
mismatched, and which are missing. No more "why does Gmail
quarantine my mail?".
Granular backup & restore
Tarball snapshot with hot-copy of state.db and
every Maildir. Restore full for disaster recovery,
per-domain when a single domain's data corrupts,
or per-mailbox when one user nuked their inbox by
mistake. Sibling mailboxes keep the last hour of mail
they received in the meantime.
Per-mailbox vacation, per-domain greylisting
Vacation auto-reply with start/end dates renders a Sieve
script under each mailbox; Dovecot pigeonhole compiles it
on first delivery. Greylisting toggle per-domain via
rspamd's whitelisted_rcpts mechanism — domains
with chatty automated senders bypass the deferral, the
rest get the standard 5-minute spam-bot defense.
Queue, spam, and statistics
Mail queue with hold/release/requeue/delete and Flush all to retry deferred. Rspamd visibility: the last 20 messages with action breakdown, search filter, symbol drilldown. Stats dashboard with top senders/recipients, per-domain disk usage, top mailboxes by size with quota bars.
Users change their own password
An optional page where each mailbox user changes their own
password, no admin needed. It runs as a separate, unprivileged
process that can't read the mail data; a tiny backend checks the
current password, limits attempts per address and per IP, and
signs out the mail apps still connected with the old one.
Off by default: sudo missus me enable.
Blocklist watch, alerts on Telegram
Every hour missus checks the server's own IPv4 and IPv6 on Spamhaus ZEN, SpamCop and PSBL. If the IP gets listed — a stolen password sending spam overnight — you get a Telegram message with the reason and the delisting link, because that is the day an email alert would never arrive. A check that can't see (Spamhaus refusing a public resolver) says so: it never reports "clean" blindly.
Part of the NetForge family
Together with two sister panels, missus covers hosting, mail, and naming on a single self-hosted box.
arx
Hosting panel. nginx + PHP-FPM, per-site outbound firewall, WireGuard admin plane, Squid SNI filter. Hosts websites — including the webmail UI you'd expose to your missus mailbox users. arx.netforge.it →
missus (you are here)
Mail server. Postfix + Dovecot + Rspamd. SMTP, IMAP, DKIM, DNS advice, granular backup. The mail half of the triad. arx + missus + nomina = self-hosted home base.
nomina
Authoritative DNS panel. BIND9 + KASP DNSSEC + RPZ threat-intel + live propagation check. Publishes the MX, SPF, DKIM and DMARC records missus tells you to set — same family, same look. nomina.netforge.it →