I'm looking to update our corporate email solution. We currently host our email on-site and use sendmail and pop. We have an outward-facing email proxy server and an internal server. I'm looking to modernize and also make our system more secure. I'd like to move to imap and ssl and also potentially add a webmail capability.

Can anyone recommend an email server system or collection of technologies that I should investigate? We are a tiny company (30ish employees) and I'd prefer something free or low cost. Linux-based goes without saying ;-)

Thanks

Zimbra ?

Add dovecot to your current setup.
It does pop & imap (with ssl available for both), so users can migrate seamlessly.

Maybe postfix to replace sendmail as your MTA.

What is not "secure" with your current setup?

You can usually point any webmail at any imap server.

This is going to depend on budget and knowledge of the staff.

IMHO I do fine with Exim + Spam Assassin + ClamAV + Dovecot but I know each pretty well.

Probably the simplest and cheapest do it yourself would be Postfix + SpamAssassin + ClamAV. I simply use Exim because it was way ahead of Postfix when I got into hosting my own MTA way back in the day.

If you want something that has calender and full Office support like most companies you want Exchange.

I second for Zimbra.

Depending on your definition of "low cost", outsource it to Google, no need to maintain / patch / upgrade your own mail servers and makes dealing with the inevitable "can I get my mail on my phone/ipad?" very easy.

Of course most people on here will now be happy to give you information on how to host your own, which is what we were doing, however from experience it's led to a drastic drop in the amount of support we've had to give users on using mail and calendars, resource booking, etc.

Something to think about.

Thanks for all the replies! TenTenths, I would LOVE to use gmail's corporate email, but we do government work and have ITAR restrictions

Currently our email is "insecure" in the sense that we use clear-text passwords for access internally -- not really a big deal in our environment, but not very professional. I wouldn't call myself an expert in any of the email technologies, but I have built servers with sendmail and clamav, and dabbled in postfix. We recently purchased a whole suite of ESET Antivirus tools, including for a linux mail server, so I'd like to utilize that. I'll also look at dovecot.

I'll definitely look into Zimbra, too -- that keeps cropping up in all my research.