Our Corporate Email Server Proposal

Dear Business Owner,

We provide a reliable and high-performance email infrastructure to meet your company's communication needs. We assist in selecting optimal solutions by providing support in setting up and managing Email servers tailored to each business's specific requirements. We create individual mail accounts for your employees, enabling more effective organization of communication and information flow.

The technical parameters of the Email server and internet connection are selected according to the volume of sent messages and the number of users, ensuring the system operates smoothly even under high loads. Our servers are fully customized to client needs, providing reliable, secure, and fast Email operations. Modern technologies such as DANE, TLSA, MTA-STS are used to enhance security. We offer modern, powerful, and secure email solutions in the Azerbaijani market.

Cybersecurity and Infrastructure Defense

Our Email servers are installed on Red Hat Enterprise Linux and other enterprise-grade Linux platforms. Data protection is ensured through compliance with security standards and advanced defense systems. Monitoring and automated security measures are applied to prevent cyberattacks.

To enhance the security and performance of the mail infrastructure, we implement HAProxy reverse proxy in front of the Postfix server. This provides protection against DDoS attacks, intelligent load balancing, and monitoring of mail traffic.

Solutions and Technologies Offered

Service/Component	Description
HAProxy Reverse Proxy	Protects Postfix and provides real-time defense against DDoS and brute-force attacks.
Postfix Mail Server	Reliable and fast mail platform.
Postscreen	Smart anti-abuse system that prevents bot and spam attacks.
SpamAssassin	Filters against malicious and promotional emails.
ClamAV Antivirus	Scans incoming and outgoing messages for viruses and malicious attachments.
International Security Standards	TLS 1.3, DANE, DNSSEC, MTA-STS.
Fast Delivery	Messages reach their destination quickly.
Compatibility	Full compatibility with SPF, DKIM, DMARC and other core protocols.

Technical Specifications and Key Advantages

HAProxy TCP proxy, Rate Limiting, and DDoS Protection

Custom-configured Postfix

Postscreen (greylisting, RBL, dynamic limits)

Hardened email accounts

SpamAssassin (Pyzor, Razor, Bayes, DNSBL, custom rules) and ClamAV integration

DKIM, SPF, DMARC — automatic signing and verification

TLS 1.3, Perfect Forward Secrecy, ECDHE, OCSP Stapling

Key Benefits for Clients

• 🛡️ 1. Enhanced protection against attacks
  • Automatic blocking of DDoS attacks — the system automatically detects and blocks IP addresses generating abnormally high traffic
  • Protection against spam-bots — limiting concurrent connections from a single IP
  • Dynamic limits — tightening restrictions for suspicious sources
• ⚡ 2. Increased productivity
  • Processing 10,000+ messages per minute without performance loss
  • Intelligent load balancing — even distribution of traffic
  • Resource optimization — efficient use of CPU and memory
• 📊 3. Improved monitoring and control
  • Real IP tracking — precise identification of message sources via PROXY protocol
  • Detailed statistics — complete real-time visibility of mail traffic
  • Quick reaction — ability to block/unblock IP addresses instantly
• 🚀 4. Scalability
  • Ready for growth — easy addition of new mail servers as load increases
  • Resilience — automatic failover to backup server in case of failure
  • Uninterrupted service — updates and maintenance performed without downtime

Protection technical details:

Parameter	Value	Description
Max connections per IP	30	Prevents overload from a single source
New connection limit	15/10 seconds	Protection against traffic spikes
Auto-ban during attack	>50/10 seconds	Immediate blocking of aggressive sources
Block duration	1 hour	Automatically unblocked after period expires

What this means for your business:

• ✅ Guaranteed delivery — legitimate messages are delivered without delay
• ✅ Reputation protection — your mail server is protected from spam attacks
• ✅ Resource savings — server load reduced by up to 40% during attacks
• ✅ Compliant with standards — modern architecture, best practices

No changes are required in the client-side email client settings, and compatibility with all mail protocols is ensured.

Conclusion

Implementing HAProxy as a protective layer in front of Postfix significantly enhances the security, reliability, and performance of your mail infrastructure. The system operates automatically, providing enterprise-level protection without requiring user intervention. Our main priority is the security and delivery of all your messages.

Collaboration and Pricing

You can start collaborating with us to increase your company's potential and achieve success. We offer transparent and reliable solutions tailored to your business specifics. The price includes server setup, configuration, and 1 year of technical support. The VPS fee is paid separately and is selected according to the client's needs.

Note: This price (starting from 700 AZN) includes only server setup, configuration, and 1 year of technical support. The VPS (virtual server) fee is not included — VPS is selected and paid separately, as each client chooses a VPS according to their business operations and needs.

However, we guarantee protection against cyberattacks!