Running #OpenBSD 7.8 ​​DNS: #nsd (3 Master Zones), #DNSSEC & #DANE (RFC6698) + #unboundFirewall: #pf with auto-fed tables (IPS-style), spambot-tarpitting & service rate limits

[me_the_fl00f@cybre.club]

Running #OpenBSD 7.8 ​​

DNS: #nsd (3 Master Zones), #DNSSEC & #DANE (RFC6698) + #unbound
Firewall: #pf with auto-fed tables (IPS-style), spambot-tarpitting & service rate limits.
Mail: #smtpd (Multi-domain, RFC8461/MTA-STS) + #rspamd (DKIM) + #dovecot (IMAPS-only).
Spam-Defense: #spamd with auto-SPF-walk (no more greylisting issues).
Web: #relayd (TLS-Terminator, HSTS, CSP) + #httpd (NIP-05, Autoconfig, security.txt).
Performance: Lightweight "Fail2Ban" via 1-liner shell script (No Python crap!).

#Nostr Relay in Rust building...

#SelfHosted #SysAdmin #Security #Privacy

[jezcaudle@infosec.exchange]

@me_the_fl00f What’s the SPF walk bit please? I’ll probably ask you about all of it but this one stuck out.