We are still actively working on the spam issue.
Talk:Email
I'm to lazy to write everything down. I recently set up a mail server by following this guides:
http://sealedabstract.com/code/nsa-proof-your-e-mail-in-2-hours/
https://www.digitalocean.com/community/articles/how-to-set-up-a-postfix-e-mail-server-with-dovecot
The second one because I didn't want to have mysql since I'm the only user. Also instead of using EncFS I use this:
https://grepular.com/Automatically_Encrypting_all_Incoming_Email
The next thing you would want to do is set up a cipher preference on postfix and dovecot, enable Perfect Forward Secrecy, harden postfix (strict helo), set up fail2ban jails: postfix, postfix-sasl and dovecot. If you're the only user and your mail client supports tlsv1.2 you could also disable sslv2, sslv3, tlsv1 and tlsv1.1 on dovecot.
