Hetzner for Email: Is the 1-Month Wait Worth It?
Hetzner blocks port 25 on new accounts for about a month. If you're setting up a mail server and need it working today, that's a deal-breaker. If you can plan one month ahead, Hetzner's IP reputation is the best you'll find on a VPS under ten euros a month. The wait is the reason the reputation is good. Everything that makes Hetzner inconvenient for spammers makes it better for you.
The exact unblock process
Here's what happens when you want to run email on Hetzner:
- Create your Hetzner Cloud account and provision a server. Port 25 is blocked at the network level by default.
- Open a support ticket through the Cloud Console. State that you want to run a mail server and request port 25 be unblocked. Include your server's IP address.
- Wait. Hetzner processes these requests manually. The timeline is approximately one month from account creation. Some users report three weeks, others five. There's no guaranteed date.
- Receive confirmation via the ticket system. The unblock is applied at the network level — no action needed on your server.
That's it. No special justification is needed. Hetzner doesn't ask for proof of domain ownership or email volume estimates. The request is routine, and they process it for legitimate use cases without pushback. The wait is the filter, not the review.
What to do during the wait
The month isn't wasted time if you use it to prepare everything else. By the time port 25 opens, your server should be ready to send its first email within minutes:
- Configure PTR/rDNS. In the Hetzner Cloud Console, set the reverse DNS for your IPv4 address to match your mail server hostname (e.g.,
mail.yourdomain.com). This propagates independently of port 25 status. - Set up DNS records. MX record pointing to your server, SPF record (
v=spf1 ip4:YOUR.IP a -all), and prepare your DKIM public key record. DMARC record (v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com). - Install and configure your mail stack. Postfix + Dovecot, Mail-in-a-Box, Mailcow, or whatever you prefer. Everything except actual sending and receiving works without port 25.
- Test locally. Send test emails between accounts on your server. Internal delivery (same server) doesn't use port 25.
- Set up monitoring. Configure Prometheus/Grafana or a simple cron job to monitor queue length, disk usage, and connection failures once you go live.
When Hetzner opens port 25, you flip the switch on a fully configured, tested mail server. No scrambling to figure out DKIM key generation after the port opens.
Why the wait makes Hetzner better for email
The connection between the waiting period and IP reputation is direct and causal. Spammers operate on speed and disposability. Their model is: create account, provision server, send spam, burn IP, move on. A provider that requires a month before port 25 opens breaks this model entirely. The spammer can't afford to wait — their stolen credit card will be charged back, their throwaway identity will expire, or they'll just go somewhere that gives them instant access.
This filtering effect compounds over time. Fewer spammers on Hetzner means fewer abuse complaints, fewer blacklist entries for Hetzner IP ranges, and higher trust scores from receiving mail servers. When your email arrives from a Hetzner IP, Gmail and Outlook are more likely to deliver it to the inbox because the IP range has a clean track record.
Compare this to providers that open port 25 instantly. RackNerd's ColoCrossing infrastructure carries poor IP reputation precisely because instant access attracts both legitimate users and spammers. Contabo's 25/min rate limit helps, but the pool is still dirtier than Hetzner's.
How Hetzner compares for email
| Factor | Hetzner | Contabo | RackNerd |
|---|---|---|---|
| Port 25 access | ~1 month wait | Immediate (25/min limit) | Immediate (no limit) |
| IP reputation | Good | Moderate | Poor |
| PTR/rDNS | Cloud Console | Customer panel | Customer panel |
| Gmail inbox rate | High (clean range) | Moderate (check your IP) | Low (ColoCrossing range) |
| Cheapest plan | €4.51/mo | ~$7/mo | ~$11/yr |
Hetzner costs more per month than RackNerd does per year. But "per month" is misleading when RackNerd emails land in spam folders. The effective cost includes the time you spend troubleshooting deliverability, requesting IP swaps, and submitting delisting requests. Hetzner's premium buys you time not spent on those problems.
When Hetzner is not the right choice
The wait is a genuine problem in two scenarios:
- You need email working today. A client migration, a business deadline, or a service that depends on transactional email right now. Hetzner can't help here. Use Contabo (instant access, moderate reputation) as a bridge.
- You're experimenting and not sure you'll commit. If you're testing whether self-hosted email is worth the effort, spending a month waiting for port 25 before you can even try is frustrating. Use a cheap instant-access provider to learn, then migrate to Hetzner when you're committed.
For everyone else — personal mail servers, small business email, hobby domains where you want reliable delivery — the month goes fast, and the deliverability payoff is the strongest available at this price point.
FAQ
How long does Hetzner take to unblock port 25?
About one month from account creation. The timeline varies (three to five weeks in practice). Hetzner processes requests manually with no guaranteed date.
How do I request port 25 unblock?
Open a support ticket in the Hetzner Cloud Console. State you want to run a mail server. Include your server IP. No special justification is needed. The unblock is applied at the network level automatically.
Is Hetzner good for self-hosted email?
Among VPS providers under €10/mo, Hetzner has the best IP reputation and therefore the best inbox delivery rates. The 1-month wait is the trade-off — and the reason the IPs stay clean.