Agreed. CF really has things figured out when it comes to dos protection, caching, load balancing, dns management, etc...

(Quote)

(Quote)

It seems you are using Cloudflare to host the DNS for mailbaby.net. Why you are doing that?

Do you offer PTR/reverse DNS on your IPs?

From what I have seen DNSSEC does not work for us properly yet. Also would be nice to manually modify DNS zones (SOA, mass record adding etc.) if not possible already (I haven't been able to find how)

If they only ever upload and not too frequently, webdav. Nothing to install and drag and drop, AFAIK. Just put it on friendly dns name and boom, easiest solution for clients.

(Quote)

Their interface is outdated but serves its purpose. The couple of extra dollars that you pay are worth it as it includes third party anycast dns and one full email account. No major concerns.

Advanced DNS Management

Manual reverse DNS [PTR] management

Thank you for the correction! All of the lg's should be working on .com as well now. We've been switching from .bg to .com for international customers and by the looks of it, we did not update DNS on

Reverse DNS

If they are blocking DNS, can't he just make his home rpi use DNS over https and skip the VPN?

or for the truly paranoid - get 2 hosts and have one as a hot standby and have all of your dns in cloudflare so you can switch it over quickly

(Quote)

At their heart, secure certificates provide nothing except encryption. And from that standpoint an EV certificate is really no better than a self-signed certificate (I suppose you can argue the poten

Then why even use Pi-hole? Just use a VPN provider and their smart DNS?

(Quote)

You can run Pi-hole on 256MB Ram. You don't need a dedicated IP address if this is just your remote. Get a dirt cheap, no frills 1 vcore of a 486 with half a gig RAM and 16G drive space. No real need