Splitting email away from web hosting — your setup?

If you're still running mail off the same box as your web server in 2026, you're asking for deliverability pain.

For what it's worth, I split mine out three years ago and my spam folder placement dropped from ~18% to under 2%. The reason is simple: web hosts get noisy neighbors, compromised wordpress installs, and IP reputation bleed. Mail providers see that ASN and throttle first, ask questions later.

SPF is easy, DKIM is easy, DMARC is where people mess up. p=reject on a shared web host is suicide if you haven't audited every single form, newsletter, cron job, and contact plugin. I've seen people lock themselves out of their own password resets because they flipped DMARC to strict before checking their transactional path.

My current setup:

• Web: Contabo KVM, 2GB, €3.50/month, runs nginx + php-fpm
• Mail: Vultr mail relay on their deliverability tier, separate dedicated IP — https://www.vultr.com/pricing/
• DNS: Cloudflare, proxied web only, mail bypass
• Monitoring: GSuite postmaster tools + Vultr dashboard weekly

The data residency angle is often missed.

To be precise, if you process mail for EU recipients and your mail host is US-based, you need either Standard Contractual Clauses or an adequacy decision. Many budget providers do not offer this in their terms. I have asked three hosts in this price bracket and only KnownHost could show me a DPA with SCCs.

My own setup:

• Web: OVHcloud in their Limburg zone
• Mail: RackNerd's EU-only mail plane, Amsterdam POP
• DNS: self-hosted knot resolver, no logging

The split is not only for reputation. It is for legal separation of processing activities. If my web server is compromised, the attacker does not have access to mail queues containing personal data. This limits breach notification scope under GDPR Article 33.

One practical note: DMARC reporting. If you use a third-party DMARC analyzer, ensure their data processing location matches your compliance needs. Many aggregate report parsers are US-hosted and ingest raw recipient domains by default.

If I split them do I need two servers? 😬

I have one little Hostinger shared plan, $8/year, runs my shop and the mail. Scared to touch DNS because last time I broke my site for 2 days. My brother set it up and he's not around anymore.

Is there like... a mail-only service I can point MX to without moving the website? I don't need anything fancy, just want my order confirmations to actually reach customers. Right now some go to spam and I lose sales.

Also what is DPA, is that something I need to worry about? I'm in the UK.

1. You do not need two servers. Point MX records to a mail-only host, keep A/AAAA records for web on Hostinger.
2. DNS change risk: lower TTL on existing records 24 hours before modification. Typical Hostinger cPanel TTL default is 14400 seconds (4 hours). Set to 300 seconds temporarily.
3. For order confirmation deliverability, verify:

• SPF record exists and includes your mail provider's include: directive
• DKIM key rotated if provider changes
• DMARC at p=none initially, monitor 30 days

Practical recommendation: Vultr and RackNerd both offer inbound mail relay with SMTP submission for transactional mail. Start with p=none DMARC, review aggregate reports weekly. Do not implement p=reject without 60 days of clean reporting.

I have make this split since 2 years lol, it is possible to do that with cheap way 😅

Before I have try self-hosted mail on my OVHcloud VPS but my IP was already dirty when I get it. Since 2 days of fight with Spamhaus I give up and go to Vultr free tier. Mdr the free tier is enough for my 3 domains and 200 mails per month.

The DNS propagation was horrible for me, I wait 48 hours and still some DNS check show old MX. Now I use TTL 600 always when I change something. Learned the hard way.

My web is on Contabo since 1 year, no problem. Mail on Vultr free. I have make a script to check if my web IP is on blocklist, if yes it send alert to Discord. Very useful lol.

You think it is possible to self-host mail with clean IP on budget VPS? I think no, always dirty pool.

I had the same spam folder pain on shared hosting