MailForward

Customer

Contact information

Customer domains

Domains & forwarding

Audit events

Most recent 500 events. Filter results by event ID, actor, action, customer username, customer ID, or detail.

Search audit eventsActor role

Email Transactions

Each original alias retains its own customer identity, with separate delivery outcomes for every forwarding destination.

Search transactions

SMTP setup

Manage the SMTP servers published in the customer DNS & SMTP setup page.

Organization settings

Customize the platform name, logo and customer portal footer.

TLS certificates

Manage HTTPS for the web portal and STARTTLS for the public receiving SMTP gateway. Changes are applied by the server worker, normally within one minute.

Web portal HTTPS Portal hostname Certificate source

SMTP gateway STARTTLS Certificate source SMTP TLS hostname

Sharing requires the web hostname. For a separate Let’s Encrypt identity, use a dedicated SMTP hostname with all A/AAAA records pointing to this server. Automatic certificates for the same hostname reuse Caddy’s certificate. This setting does not change DNS, MX records, the SMTP banner or the SMTP server list.

Let’s EncryptACME contact email (optional) I agree to the Let’s Encrypt subscriber agreement for automatic certificates.

Read the Let’s Encrypt agreements

Keep public ports 80 and 443 open for validation and renewal. No DNS provider credentials are needed. Caddy renews certificates when due; retry does not force issuance. Private keys are encrypted in the database and never returned by the portal. Preserve APP_SECRET with protected backups.

System Settings

Back up and restore the platform, configure SMTP endpoints, manage certificates and customize the portal.

Log Archives

Archive audit and email records as open JSON Lines, and original Postfix logs as text. Files are gzip-compressed and stored in a private Backblaze B2 or Cloudflare R2 Standard bucket. Mail queues and message bodies are excluded.

Enable log archiving

Off by default. Collection and automatic uploads stop when disabled; pending files are retained. First enable includes retained database history and available backend log files. Docker SMTP collection starts when first enabled.

Storage providerAccount label (optional) Upload period Bucket name Folder / key prefix B2 S3 region Cloudflare account ID R2 bucket jurisdiction Application / S3 access key ID Application / S3 secret access key

Use provider-issued S3 application credentials, not your website login password. Blank key fields retain the saved pair for the same provider. Both are encrypted at rest and are never displayed. The worker needs object write and metadata-read access; it does not list or delete cloud objects. Configure bucket privacy, encryption, lifecycle and any retention locks with your provider.

Upload pending archives when Postfix log rotation or container log rollover is detected

Audit records are stored in PostgreSQL. They are exported into archive segments without deleting or rolling the database table. The selected period controls normal uploads; rotation can upload sooner. Local collection checks run about once per minute.

I confirm that pending local archives may be sent to a changed storage destination Remove saved cloud credentials (disable archiving first) Current administrator password

Save settings before testing. Re-enter the administrator password above to test or run. Connection testing explicitly writes and verifies a small test object, even while automatic archiving is off. Archive now requires archiving to be enabled.

Pending files use a private, bounded 256 MiB local buffer. Upload failures retain data and show an error. The local server is still a single point of loss until upload succeeds; choose a suitable period and monitor errors. Re-enabling seeds retained database records again; analysts should deduplicate structured records by source identity and record version.

Backup & restore

Portable, passphrase-encrypted ZIP files. The restore function accepts the files generated here. Install a compatible v1.3.6 platform before restoring onto a fresh server.

Full backups preserve accounts, domains, aliases, policies, branding, TLS settings, audit logs, email history and delivery outcomes. Mail queues, raw server log files, host credentials and operating-system configuration are excluded. Log rotation and long-term archival are planned separately.

Recent operations

Domain rate limits

Administrator-only settings. Each domain has its own rolling one-hour counter. At the limit, forwarding pauses and incoming mail receives a temporary SMTP deferral for retry.

Find a domain

MailForward

Customer sign in

New customer registration

Reset password

Administrator sign in

Complete password recovery

Your domains

Contact details

Recovery email verification

Change password

My Activity

Email History

DNS & SMTP setup

1. Verify domain ownership

2. Route incoming email

Customers

Create customer