Configure postscreen for mta port 25#530

Draft

jeboehm wants to merge 11 commits intomainfrom

cursor/configure-postscreen-for-mta-port-25-74e0

Commits on Oct 17, 2025

Refactor: Unbound to use port 53 and NET_BIND_SERVICE

cursoragent
and
jeboehm
committed
Checkpoint before follow-up message

cursoragent
and
jeboehm
committed
Refactor: Change unbound port to 53 and update healthcheck

cursoragent
and
jeboehm
committed
docs: Update UPGRADE.md for Unbound port change

cursoragent
and
jeboehm
committed
feat: Enable Postfix Postscreen and configure Unbound DNS

cursoragent
and
jeboehm
committed
Add NET_BIND_SERVICE capability to unbound container

cursoragent
and
jeboehm
committed
Refactor healthcheck script to use dig for TCP checks

cursoragent
and
jeboehm
committed
Checkpoint before follow-up message

cursoragent
and
jeboehm
committed
fix: grant NET_BIND_SERVICE capability to unbound binary
cursoragent
committed
fix: enable privilege escalation for NET_BIND_SERVICE capability
cursoragent
committed
refactor: simplify unbound to run as root for port 53 binding
cursoragent
committed