DKIM + SPF + DMARC on VPS: Email Spoofing Protection

apt install opendkim opendkim-tools -y
opendkim-genkey -t -s mail -d yourdomain.com

💡 Start with p=none in DMARC (monitoring mode). Move to p=quarantine, then p=reject after reviewing reports.