<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Running #OpenBSD 7.8 ​​DNS: #nsd (3 Master Zones), #DNSSEC &amp;amp; #DANE (RFC6698) + #unboundFirewall: #pf with auto-fed tables (IPS-style), spambot-tarpitting &amp;amp; service rate limits]]></title><description><![CDATA[<p><span>Running </span><a href="https://cybre.club/tags/OpenBSD" rel="tag">#OpenBSD</a><span> 7.8 </span>​<img class="not-responsive emoji" src="https://cybre.club/files/d0059ef8-7a84-456a-b3cb-d9fcdc596716" title=":openbsd:" />​<span><br /><br />DNS: </span><a href="https://cybre.club/tags/nsd" rel="tag">#nsd</a><span> (3 Master Zones), </span><a href="https://cybre.club/tags/DNSSEC" rel="tag">#DNSSEC</a><span> &amp; </span><a href="https://cybre.club/tags/DANE" rel="tag">#DANE</a><span> (RFC6698) + </span><a href="https://cybre.club/tags/unbound" rel="tag">#unbound</a><span><br />Firewall: </span><a href="https://cybre.club/tags/pf" rel="tag">#pf</a><span> with auto-fed tables (IPS-style), spambot-tarpitting &amp; service rate limits.<br />Mail: </span><a href="https://cybre.club/tags/smtpd" rel="tag">#smtpd</a><span> (Multi-domain, RFC8461/MTA-STS) + </span><a href="https://cybre.club/tags/rspamd" rel="tag">#rspamd</a><span> (DKIM) + </span><a href="https://cybre.club/tags/dovecot" rel="tag">#dovecot</a><span> (IMAPS-only).<br />Spam-Defense: </span><a href="https://cybre.club/tags/spamd" rel="tag">#spamd</a><span> with auto-SPF-walk (no more greylisting issues).<br />Web: </span><a href="https://cybre.club/tags/relayd" rel="tag">#relayd</a><span> (TLS-Terminator, HSTS, CSP) + </span><a href="https://cybre.club/tags/httpd" rel="tag">#httpd</a><span> (NIP-05, Autoconfig, security.txt).<br />Performance: Lightweight "Fail2Ban" via 1-liner shell script (No Python crap!).<br /><br /></span><a href="https://cybre.club/tags/Nostr" rel="tag">#Nostr</a><span> Relay in Rust building... <br /><br /></span><a href="https://cybre.club/tags/SelfHosted" rel="tag">#SelfHosted</a><span> </span><a href="https://cybre.club/tags/SysAdmin" rel="tag">#SysAdmin</a><span> </span><a href="https://cybre.club/tags/Security" rel="tag">#Security</a><span> </span><a href="https://cybre.club/tags/Privacy" rel="tag">#Privacy</a></p>]]></description><link>https://board.circlewithadot.net/topic/a59a7753-4fbe-4a55-b27a-ab310d1613fe/running-openbsd-7.8-dns-nsd-3-master-zones-dnssec-amp-dane-rfc6698-unboundfirewall-pf-with-auto-fed-tables-ips-style-spambot-tarpitting-amp-service-rate-limits</link><generator>RSS for Node</generator><lastBuildDate>Wed, 15 Apr 2026 18:09:08 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/a59a7753-4fbe-4a55-b27a-ab310d1613fe.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 30 Mar 2026 13:21:08 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Running #OpenBSD 7.8 ​​DNS: #nsd (3 Master Zones), #DNSSEC &amp;amp; #DANE (RFC6698) + #unboundFirewall: #pf with auto-fed tables (IPS-style), spambot-tarpitting &amp;amp; service rate limits on Mon, 30 Mar 2026 15:52:35 GMT]]></title><description><![CDATA[<p><span><a href="https://cybre.club/@me_the_fl00f">@<span>me_the_fl00f</span></a></span> What’s the SPF walk bit please? I’ll probably ask you about all of it but this one stuck out.</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/users/JezCaudle/statuses/116318925971707682</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/users/JezCaudle/statuses/116318925971707682</guid><dc:creator><![CDATA[jezcaudle@infosec.exchange]]></dc:creator><pubDate>Mon, 30 Mar 2026 15:52:35 GMT</pubDate></item></channel></rss>