G Derber

These are all really one role with different tasks.

Using the same socket causes problems. References: - https://serverfault.com/questions/752437/debugging-spamassassin-with-postfix - https://serverfault.com/questions/783401/how-to-get-spamassassin-working-with-postfix-as-a-milter

This needs to be configured so that DKIM host matches SPF records. Refs: - https://www.caicorp.com/2021/06/22/postfix-as-a-mail-relay-only-server-for-inbound-and-outbound-smtp-mail/ - https://www.linuxbabe.com/mail-server/how-to-set-up-a-backup-email-server-postfix-ubuntu/amp - https://www.postfix.org/postconf.5.html#sender_dependent_default_transport_maps - https://www.postfix.org/SASL_README.html#server_cyrus - https://www.cyrusimap.org/sasl/sasl/quickstart.html -

References: - https://www.postfix.org/smtp-smuggling.html

References: - https://github.com/mailvelope/mailvelope/wiki/Mailvelope-GnuPG-integration

References: - https://gist.github.com/huntrar/e42aee630bee3295b2c671d098c81268 - https://wiki.archlinux.org/title/GRUB#Encrypted_/boot

Yubikeys can unlock luks partitions using one or more of: 1. HMAC-SHA1 3. HOTP 4. Key file encrypted with GPG 5. Key file encrypted with x509 References: - [Yubikey Two-Factor...

This will allow different responses based on VLAN subnets. For example, IoT devices that don't need knowledge of LAN services. Or allowing IoT devices that need IP address overrides ([Riiconnect24](https://github.com/RiiConnect24/DNS-Server))...

Configure bind9 sinkhole. This is done through response policy zones. Steps: - [ ] Add response-policy to options - [ ] Add zone definitions to named.conf.local - [ ] Add...