Kb mx antispam

header

subheader

TODO: - antispam; make accounts

- validity: make accounts, set IPs - https://my.validity.com/zone/settings?tab=ip

raw info:

- apt install unbound - nano /etc/unbound/unbound.conf

server:
        verbosity: 1
        interface: 127.0.0.1
        port: 53
        cache-min-ttl: 3600
        cache-max-ttl: 86400
        do-not-query-localhost: no
        num-threads: 2
        rrset-roundrobin: yes
        harden-glue: yes
        harden-dnssec-stripped: yes
        use-caps-for-id: yes
        qname-minimisation: yes
        hide-identity: yes
        hide-version: yes
        auto-trust-anchor-file: "/var/lib/unbound/root.key"
        access-control: 127.0.0.1/32 allow

remote-control:
        control-enable: yes
        control-interface: 127.0.0.1
        #server-key-file: "/etc/unbound/unbound_server.key"
        #server-cert-file: "/etc/unbound/unbound_server.pem"
        #control-key-file: "/etc/unbound/unbound_control.key"
        #control-cert-file: "/etc/unbound/unbound_control.pem"

- systemctl start unbound - systemctl enable unbound - dig @127.0.0.1 lachcraft.cloud - EDIT PMG DNS: only 127.0.0.1