Budget VPS with Port 25 Open: The Hidden Cost of Cheap Email Hosting
A RackNerd VPS costs $11 per year and ships with port 25 open. A DartNode VPS costs $2.95 per month with no SMTP restrictions. You install Mailcow or Mail-in-a-Box, configure SPF, DKIM, and DMARC, send a test email to Gmail, and it lands in spam. Or it bounces from Outlook with a 550 5.7.1 error. The VPS was cheap. The email problem is not. This is the real cost breakdown of running email on budget VPS infrastructure, and why a $4 server often costs less than a $1 server.
Which budget providers open port 25
Port 25 policy falls into three categories: open by default (no ticket), open on request (support ticket required), and blocked permanently (no exceptions). Here is the current state for providers under $10 per month:
Open by default
| Provider | Cheapest plan | Port 25 | Restrictions |
|---|---|---|---|
| RackNerd | ~$11/year (1 vCPU, 1 GB RAM, 25 GB SSD) | Open | No official limit documented. Some users report a soft cap around 100 emails per hour. |
| DartNode | $2.95/month (1 vCPU, 1 GB RAM, unlimited bandwidth) | Open | No stated sending limits. Houston datacenter only. DartNode auto-disables SMTP if the IP hits blacklists and requires you to delist before re-enabling. |
| Contabo | EUR 5.50/month (4 vCPU, 8 GB RAM, 75 GB NVMe) | Open | 25 emails per minute rate limit (~1,500/hour). LowEndTalk reports confirm this is enforced. Contabo will not submit blacklist removal requests on your behalf. |
| OVHcloud | ~$4.20/month (1 vCPU, 2 GB RAM) | Open (most regions) | Some datacenters may block by default. AS16276 listed on UCEPROTECT L3 (irrelevant for Gmail/Outlook). |
| Hostinger VPS | $3.99/month | Open | 5 emails per minute limit. Effectively unusable for any meaningful volume. |
Open on request
| Provider | Cheapest plan | Process | Timeline |
|---|---|---|---|
| Hetzner | EUR 3.49/month (2 vCPU, 4 GB RAM) | Port 25 blocked for ~1 month after account creation. After paying first invoice, submit a "limit request" describing your use case. Port 587 is open immediately. | ~1 month wait, then case-by-case review |
| Vultr | $6/month (1 vCPU, 1 GB RAM) | Submit support ticket. Official docs recommend ports 465/587 instead. | Varies |
| Linode/Akamai | $5/month (1 vCPU, 1 GB RAM) | Blocked for accounts created after November 5, 2019. Submit support ticket with use case description. Must configure rDNS, SPF, DKIM, DMARC. | Varies |
Blocked permanently
| Provider | Status | Since |
|---|---|---|
| DigitalOcean | Ports 25, 465, 587 all blocked, no exceptions | June 22, 2022 |
| Oracle Cloud (Free Tier) | Port 25 blocked, cannot override via security lists | June 23, 2021 |
| AWS Lightsail | Port 25 blocked by default. Unblock request possible but processing takes 48+ hours and is not guaranteed. | Default policy |
Why open port 25 does not mean deliverable email
Having port 25 open is the first gate. The second gate is IP reputation, and this is where budget VPS email falls apart.
Budget providers recycle IPv4 addresses from terminated accounts. When the previous tenant sent spam, the IP carries blacklist entries. You inherit them. The providers with the cheapest prices and easiest signup attract the most spammers, creating a churn cycle that contaminates their entire IP pools.
| Provider / ASN | IP pool reputation | Evidence |
|---|---|---|
| ColoCrossing / RackNerd AS36352 | Poor | 383,683 IPs, 1.86% spam rate. Worst subnet 107.172.195.0/24 hits 43% spam. CleanTalk AS36352. Spamhaus has blacklisted large blocks. A WebHostingTalk thread: "ColoCrossing isn't doing enough to stop outbound spam." |
| BuyVM / FranTech AS53667 | Poor | 67,797 IPs. Allows Tor exit nodes, which generate massive abuse complaints. SlickStack documented BuyVM as "a huge sponsor of email spam and malware." |
| Contabo AS51167 | Mixed | UCEPROTECT L3 listed (but Gmail/Outlook ignore UCEPROTECT). Individual IP quality varies. Contabo's FAQ acknowledges UCEPROTECT and correctly states it does not affect major providers. |
| Hetzner AS24940 | Better | Port 25 gate filters spammer accounts. Active abuse team cooperates with blacklist organizations. Mailflow Authority recommends Hetzner as best VPS for self-hosted email. |
The Spamhaus distinction matters here. Gmail, Microsoft, and Yahoo check Spamhaus. They do not check UCEPROTECT, Barracuda BRBL, or SpamCop for consumer inbox filtering. So a UCEPROTECT listing on Contabo or OVHcloud is noise. A Spamhaus SBL listing on a ColoCrossing subnet is the real problem. Check your IP at check.spamhaus.org before installing any email software.
SMTP relay pricing for personal mail servers
The community-endorsed architecture for budget VPS email is a split: receive on the VPS (IMAP, SMTP inbound on port 25), send through a relay service (outbound on port 587). The relay sends from IPs that Gmail and Microsoft already trust. Your VPS's dirty IP never touches the outbound path.
For a personal mail server sending 50-200 emails per month, multiple relay services cover this volume at zero cost:
| Relay service | Free tier | Cost for 200 emails/month | Notes |
|---|---|---|---|
| Brevo (formerly Sendinblue) | 300/day, no credit card | $0 | Most generous free tier. Simple SMTP relay configuration. No expiration. |
| SMTP2GO | 1,000/month (200/day limit), no credit card | $0 | Permanent free tier. Dashboard shows deliverability metrics. |
| Mailgun | 100/day (~3,000/month) | $0 | Free tier covers personal volume. Paid starts at $15/month for 10K. |
| Resend | 3,000/month (100/day limit) | $0 | API-first design but SMTP relay also available. |
| Amazon SES | 3,000/month free for 12 months (from EC2) | $0 (year 1), ~$0.02/month after | Cheapest at scale ($0.10/1,000). Setup is more complex: AWS account, DKIM verification, sandbox exit request. |
| Zoho ZeptoMail | 10,000 emails free trial (1 month) | ~$0.42/month (credit-based) | Cheapest paid option long-term. $2.50 per 10,000 emails. |
| Postmark | 100/month | $0 if under 100, $15/month otherwise | Strong Outlook deliverability specifically. Praised in Cloudron forum threads. |
The Postfix configuration for any of these is one line: relayhost = [smtp.provider.com]:587 with SASL authentication credentials. Mailcow and Mail-in-a-Box have relay settings in their admin panels. The setup takes under 10 minutes.
The real total cost calculation
The sticker price of a VPS is not the cost of running email on it. Here are three scenarios that show the actual math:
Scenario 1: RackNerd + free relay
- VPS: $11/year ($0.92/month)
- SMTP relay (Brevo/SMTP2GO free tier): $0/month
- Total: $0.92/month
- Catches: 1 GB RAM limits you to Stalwart or a bare Mail-in-a-Box install. The VPS handles receiving; the relay handles sending. You skip the dirty IP problem entirely for outbound, but your inbound IP (for receiving) is still on ColoCrossing, which works fine for MX records.
Scenario 2: Hetzner, no relay
- VPS: EUR 3.49/month (~$4.15)
- SMTP relay: $0 (clean IPs, direct sending works after trust period and IP warming)
- Total: ~$4.15/month
- Advantages: No relay dependency. Full control over your mail pipeline. 4 GB RAM runs Stalwart, Mail-in-a-Box, iRedMail, or Modoboa comfortably. Hetzner is the only budget-adjacent provider where direct sending works for most users.
Scenario 3: Budget VPS + delisting hours
- VPS: any budget provider, $1-5/month
- Check IP on MXToolbox after provisioning: 10-15 minutes
- IP is dirty, request replacement from provider: 1-24 hours of waiting
- Replacement IP also dirty, submit Spamhaus delisting: 30 minutes + 24-48 hours processing
- Microsoft re-blocks your subnet 3 weeks later: another round of delisting
- At $15/hour for your time, 4 hours of annual delisting work = $60 = 14 months of Hetzner
Email software vs VPS specs
The second hidden cost: many budget VPS plans lack the RAM to run popular email suites. Here is what each option needs and what can actually run on a $11/year server:
| Software | Min RAM | Docker required? | Runs on 1 GB VPS? |
|---|---|---|---|
| Stalwart | 512 MB practical (~100 MB idle) | No (native binary or Docker) | Yes |
| Mail-in-a-Box | 512 MB minimum, 1 GB recommended | No (bare metal Ubuntu 22.04) | Barely |
| iRedMail | 1 GB minimum, 2 GB recommended | No (Docker version exists) | No |
| Modoboa | 2 GB minimum (uses more after install) | No | No |
| Mailcow | 6 GB minimum + 1 GB swap | Yes (Docker Compose, docs) | No |
The practical mapping: a RackNerd $11/year VPS (1 GB RAM) can run exactly one email suite: Stalwart. Written in Rust, it idles at 100 MB and supports IMAP, JMAP, SMTP, CalDAV, and CardDAV. Mailcow, the most popular Docker-based suite, needs 6 GB minimum, which means the cheapest option that runs it is Contabo at EUR 5.50/month (8 GB RAM). Mail-in-a-Box needs bare-metal Ubuntu (no Docker) and 1 GB RAM, making it marginal on a 1 GB VPS.
Also verify your VPS runs KVM, not OpenVZ. Mailcow requires Docker, which requires KVM (or ESX, or Hyper-V). OpenVZ does not support Docker. Most budget VPS today are KVM, but some legacy plans on providers like RackNerd or GreenCloud may still run OpenVZ. Check before purchasing.
What the community actually does
The self-hosted email community has converged on a clear consensus after years of collective trial and error:
Receive on the VPS, send through a relay. A LowEndTalk thread asking "do you use an SMTP relay?" shows the dominant architecture: the VPS handles inbound email and IMAP access, while a relay service (SES, Brevo, Mailgun) handles outbound delivery through trusted IPs. LowEndBox published a guide to this exact setup for under $3/month using Amazon SES.
The "gave up" warning. Carlos Fenollosa's widely-discussed post, "After self-hosting my email for twenty-three years I have thrown in the towel", documented a perfect 10/10 mail-tester.com score with emails being silently deleted by major providers. 23 years of experience, 10 years on a dedicated IP with zero spam sent, and still beaten by infrastructure-level filtering. The post generated hundreds of comments on Hacker News.
The counterpoint. vadosware.io argues that modern software (Stalwart, Mailcow, Mail-in-a-Box) makes the technical setup trivial. The unsolved problem is deliverability to Gmail and Microsoft. The recommended solution: relay services for outbound.
The Hetzner exception. When LowEndTalk threads ask for a VPS recommendation specifically for email, Hetzner is the most frequent answer. The one-month port 25 wait period, active abuse team, and cleaner IP pools make it the only budget-adjacent provider where direct sending consistently works. The trade-off is waiting a month before you can send.
The practical takeaway from years of community experience: self-hosted email receiving on a budget VPS works fine. Self-hosted email sending directly from a budget VPS will fail for most users. The split architecture (receive on VPS, send through relay) is the working solution that costs under $5/month total.
FAQ
Which budget VPS providers have port 25 open by default?
RackNerd (~$11/year), DartNode ($2.95/month), and Contabo (EUR 5.50/month with a 25 emails/minute rate limit) ship with port 25 open. Hetzner opens it after a one-month trust period. DigitalOcean blocked all SMTP ports in June 2022 with no exceptions. Oracle Cloud free tier blocks port 25 permanently.
Why does my email from a budget VPS go to spam even with SPF and DKIM?
Your IP inherited blacklist entries from the previous tenant. Budget providers recycle IPs from terminated spam accounts. SPF and DKIM prove authorization, not reputation. Gmail and Microsoft check Spamhaus before evaluating your authentication. If your IP is on Spamhaus SBL, your email bounces regardless of authentication. Check at check.spamhaus.org.
Do I need an SMTP relay for email on a budget VPS?
For sending, yes. Use the VPS for receiving (IMAP/POP3) and route outbound through a relay. Brevo (300/day free), SMTP2GO (1,000/month free), and Mailgun (100/day free) all cover personal mail volume at $0/month. The relay sends from trusted IPs, bypassing your dirty VPS IP entirely.
Is Hetzner worth the extra cost over RackNerd for email?
For email, yes. The price difference is $39/year ($11 vs $50). If you spend more than 2.5 hours per year dealing with IP reputation issues on RackNerd ($15/hour), Hetzner is cheaper. Hetzner is the only budget-adjacent provider where direct sending (no relay) works reliably.