Update README.md

README.md

@@ -1071,16 +1071,63 @@ dig @SERVER_PUBLIC_IP google.com
 >or  
 >connection timed out  
 
-## Mail DNS  
+## Fix local DNS resolution for mail services (VPS)  
 dig @10.8.0.1 MX srv1.mail-tester.com  
 >status: NOERROR  
 
 dig @127.0.0.1 MX srv1.mail-tester.com  
 >... timed out  
 
+sudo nano /etc/dnsmasq.d/99-adguard-upstream.conf  
+```
+no-resolv  
+server=10.8.0.1  
+```
+
+sudo dnsmasq --test  
+>syntax check OK  
+
+sudo systemctl restart dnsmasq  
+sudo systemctl status dnsmasq --no-pager  
+
+Test>  
+dig @127.0.0.1 MX srv1.mail-tester.com  
+dig MX srv1.mail-tester.com  
+>status: NOERROR for both of them  
+
+```
+sudo postqueue -f  
+sudo tail -f /var/log/mail.log  
+```
+>status=sent  
+
+
+sudo systemctl status dnsmasq  
+>active (running)  
+
+
+## Make nftables rules persistent (VPS)  
+
+Save the current rules:  
+sudo nft list ruleset | sudo tee /etc/nftables.conf >/dev/null  
+
+sudo cat /etc/nftables.conf  
+
+Check the service is enabled:  
+sudo systemctl enable nftables  
+sudo systemctl status nftables  
+
+Reboot system:  
+sudo reboot  
+
+After system:  
+sudo nft list ruleset  
+sudo nft -a list chain inet filter input  
+>WireGuard DNS ACCEPT  
+>localhost ACCEPT  
+>public DNS DROP  
+
 
 Disable uBlock Origin, AdGuard Browser Extension, Brave Shields, or any other third-party content blocker if the login page does not load correctly  
 
 Login Page -> https://ads.domain/login.html  
-
-