The systems your business runs on, looked after properly.
Ulaach manages corporate email, DNS, servers, databases and the automation
that connects them — for companies that need this to work every day but do not want an
in-house infrastructure team.
Infrastructure services, delivered as an ongoing relationship
We take responsibility for a defined part of your technical estate and keep it running —
not a one-off project that ends when the invoice is paid.
Corporate email
Company mailboxes on infrastructure we run and monitor, with the authentication that
decides whether your mail is trusted by the recipient.
Mailbox hosting, webmail, IMAP and SMTP
SPF, DKIM and DMARC configuration
Spam and virus filtering
Per-account sending limits
DNS and domains
Authoritative nameservers and zone management, so records change when your business
needs them to rather than when a reseller gets around to it.
Redundant authoritative nameservers
Zone design and record management
Domain migration without downtime
TLS certificates and renewal
Server operations
Linux servers on cloud or on-premises hardware, patched, monitored and documented, with
someone accountable when something stops.
Provisioning and hardening
Patching and change management
Monitoring with alerting
Incident response
Database administration
Production database care for systems the business cannot afford to lose — capacity,
performance and a backup strategy that has actually been tested.
Oracle and PostgreSQL administration
Backup and recovery strategy
Capacity and growth planning
Performance investigation
Automation and integration
The repetitive work between systems — reports, transfers, reconciliations — handled by
something that runs on schedule and tells you when it doesn't.
Scheduled reporting and data pipelines
System-to-system integration
Internal tooling
Alerting into the channels you already use
Backup and recovery
Backups that are scheduled, verified and restorable — and a recovery procedure someone
has walked through before the day it is needed.
Automated daily backups
Off-site copies
Restore testing
Documented recovery steps
How we work
Take it on carefully, then keep it boring
Most of the risk in managed infrastructure sits in the handover. We move deliberately at
the start so that the running phase is uneventful.
Step 01
Review
We document what exists today — servers, domains, mail flow, backups — and write down
what is fragile before anything is touched.
Step 02
Migrate
Systems move one at a time, lowest risk first, each one verified and watched before the
next follows. Nothing is cut over in bulk.
Step 03
Operate
Monitoring, patching, backups and capacity checks run on a schedule, with alerts that
reach a person rather than a dashboard nobody opens.
Step 04
Report
You get a plain account of what changed, what broke, what it cost and what we intend to
do about it next month.
Sectors
Who we work with
Established Mongolian businesses with real operational dependence on email and internal
systems, and no reason to employ a full infrastructure team.
Mining and exploration
Field reporting, drilling documentation and correspondence with contractors and
regulators — where a mailbox failing is an operational problem, not an inconvenience.
Healthcare
Clinic and laboratory correspondence with patients, partners and suppliers, handled
with the confidentiality the sector requires.
Audit and advisory
Firms exchanging financial documents with clients, where message delivery and record
retention both have to be dependable.
Aviation and logistics
Operational correspondence across time zones and partners, on infrastructure that does
not go quiet outside office hours.
Media and publishing
Editorial platforms and the content pipelines behind them, including scheduled
publishing and distribution.
Professional services
Small and mid-sized firms consolidating scattered hosting, domains and mailboxes into
one managed arrangement.
Email practice
We run business email, not campaigns
Everything leaving our infrastructure is
correspondence between parties who already have a relationship — an invoice, a system
notice, a reply to a customer. We publish how we operate because deliverability depends
on it, and because our clients are entitled to know.
Recipients
Employees, customers, vendors and partners of the companies we host. We do not buy,
rent or scrape mailing lists, and we do not send unsolicited commercial mail.
Authentication
A domain is verified and configured with SPF, DKIM and DMARC before it is permitted
to send anything through our infrastructure.
Rate limiting
Every mailbox carries an hourly sending cap sized to what that person actually needs,
so a compromised password cannot become a mass send.
Bounces
Delivery failures are monitored. Addresses that hard bounce are identified and taken
out of use rather than retried indefinitely.
Complaints
Complaint and reputation signals are routed to our operations alerts. An account
showing abnormal behaviour is restricted while we investigate.
Abuse reports
Reports reach a monitored address and are followed up with the account concerned.
Write to abuse@ulaach.net.
About
A small team, deliberately
Ulaach is an infrastructure practice based in Ulaanbaatar. We work with a limited
number of clients so that the person answering your message is the same person who
configured the system.
Our background is production operations rather than sales: database administration on
systems that run around the clock, server estates that have to survive their own
maintenance windows, and the unglamorous automation that keeps the two connected.
We take on new domains slowly and on purpose. Each one is migrated, verified and
watched for a while before the next follows.
Based inUlaanbaatar, Mongolia
Working hoursMon–Fri, with monitoring and alerting outside them
Mail stackExim, Dovecot, authenticated outbound relay
HostingCloud and on-premises, per client requirement
LanguagesMongolian, English
Contact
Tell us what you are running
Whether you are consolidating scattered hosting, moving away from a provider that has
stopped answering, or receiving mail from a domain we operate — this reaches the same
small team.