Daniel Micay
|
9f84c50869
|
force DMARC enforcement for gmail.com
|
2024-04-15 11:42:03 -04:00 |
Orazio
|
9aba6192e7
|
unbound: block dns rebinding
Blocking RFC 1918 addresses too is unlikely to be useful on your setup, but may be in case you add something like a VPC in the future.
|
2023-10-04 10:26:16 -04:00 |
|
Daniel Micay
|
9419af1bd6
|
use af21 for unbound DoT traffic
|
2023-08-19 00:20:21 -04:00 |
Tommy
|
f90943d9e9
|
Additional unbound hardening
|
2023-07-09 18:46:33 -04:00 |
Daniel Micay
|
312b1a027b
|
switch to unix domain sockets for mastodon
|
2023-02-17 16:24:35 -05:00 |
|
Daniel Micay
|
53b2431f6b
|
switch to unix socket socket for redis
|
2023-02-15 02:45:52 -05:00 |
|
Daniel Micay
|
7871fa2d51
|
add comments for unbound avoid port configuration
|
2023-02-11 20:29:33 -05:00 |
|
Daniel Micay
|
edbb9158a4
|
avoid port 7275 (supl) for unbound
|
2023-02-11 20:23:22 -05:00 |
|
Daniel Micay
|
3c6aeeab3d
|
add Mastodon ports to unbound avoid list
|
2023-01-10 14:09:10 -05:00 |
|
Daniel Micay
|
3d5f437ec7
|
allow unbound to use more outbound ports
|
2022-09-22 13:41:47 -04:00 |
|
Daniel Micay
|
97ad3e7810
|
unbound: disable unnecessary id/version queries
|
2022-07-27 02:38:34 -04:00 |
|
Daniel Micay
|
16b58ea6e4
|
enable strict QNAME minimisation
|
2022-07-27 02:30:53 -04:00 |
|
Daniel Micay
|
1d9d5df54c
|
unbound: only listen on IPv6
|
2022-07-10 15:41:10 -04:00 |
|
Daniel Micay
|
710d487e78
|
qname-minimisation is enabled by default now
|
2022-07-03 09:30:44 -04:00 |
|
Daniel Micay
|
f5e61e0ca7
|
unbound: enable prefetch and prefetch-key
|
2021-09-14 23:58:14 -04:00 |
|
Daniel Micay
|
964473b6c2
|
add IPv6 DNS resolvers
|
2021-09-08 04:08:36 -04:00 |
|
Daniel Micay
|
d24d24926a
|
add subset of shared configuration files
|
2021-07-28 08:23:04 -04:00 |