Recommendation for SMTP Server for Phishing Tests?
reddit / selfhosted

----------------------------------------------------------------------
RevolutionaryRisk521 · 2023-11-29 15:18

We are using GoPhish in our company to make our users aware to the
risks of phishing and testing out how vulnurable we are to that.

So far we have bought a domain and use regular cloud SMTP Servers to
send those internal phishing mails. We would however like to use an
self-Hosted SMTP Server to simulate attacks from a reputable domain
(like ["@google.com](mailto:"@google.com)") that has a regular SPF /
DKIM / DMARC working.


So for that we are looking for an easy to set up SMTP Server. As it
will just be used for internal spam and will not be whitelisted by us
and will be offline while we are not running phishing awareness
campaigns ease of setup / Use is rated higher than security of the
SMTP Server for that project.

​

Any recommendations?

----------------------------------------------------------------------
sum_yungai · 2023-11-29 23:07

Small Debian VM + Postfix. Something like this:

https://www.digitalocean.com/community/tutorials/how-to-install-and-
configure-postfix-as-a-send-only-smtp-server-on-debian-10