@freemo My friend who has his own email service setup says most of what would be useful is to look / search for this:
spf dkim dmarc
which gave me these results I'll shortlist:
SPF, DKIM, DMARC: Email Authentication Explained - The Hunter Blog
https://hunter.io/blog/spf-dkim-dmarc/
DKIM, DMARC, and SPF: Setting Up Email Security - How-To Geek
https://www.howtogeek.com/devops/dkim-dmarc-and-spf-setting-up-email-security/
SPF, DKIM & DMARC Explained: How To Set Them Up And Combat Fake Emails
@freemo Friends says he gets about 15spam a day... but also I was thinking it's enough to reduce our aim / expectation so we (the more private) could have something that is for authorised people *only* (adding it to an 'auth list' or filter... for those we we know will be contacting us (so for example on Mastodon we could exchange mails,,, so you might have google etc but one the other less 3rd party to switch to AND auth'd email service means after initial contact (google or whichever way) means thereafter more private comms instead of trying to copy google for everything...
so keep google but solve important comms on something exclusive / 99.99% safer than trying to solve it all in one go and be a google. And then after maybe when spam technology is made easier could switch to allowing all - first priority is not letting Google in to private comms / all accounts / people connected to etc etc :]
agreed... yes more-trusted whitelisting / graylisting even exclusive access etc at least between a few
sounds like a good start (in keeping communication integrity)
@freeschool @freemo rspamd does a pretty good job filtering spam. funnily most spams are removed by graylisting, not even by sophisticated stuff.