Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

They say AI isn’t profitable.

Uncategorized
12 9 32

Gli ultimi otto messaggi ricevuti dalla Federazione
Post suggeriti
  • 0 Votes
    1 Posts
    12 Views
    New blog post: GeoIP-Aware Firewalling with PF on FreeBSDRunning a mail server means constant brute-force attempts. My solution: geographic filtering. SMTP stays open for global mail delivery, but client ports (IMAP, Submission, webmail) are restricted to Central European IP ranges only.Result: ~90% reduction in attack logs, cleaner signal-to-noise ratio, smaller attack surface.Using MaxMind GeoLite2 + PF tables with ~273k CIDR blocks.https://blog.hofstede.it/geoip-aware-firewalling-with-pf-on-freebsd/#FreeBSD #InfoSec #SysAdmin #pf #DevOps
  • 0 Votes
    1 Posts
    9 Views
    Under the hood update!I’ve finally retired the old cron + sh setup for the weather bots. It served us well, but it had a major flaw: if I rebooted the server while it was posting, the job just died halfway. If the server was down during a scheduled slot, the forecast was lost forever.So, I wrote a custom Python daemon to run inside the FreeBSD Jails.It’s stateful now. If a crash happens at city 15 of 50, it resumes exactly there on reboot.If the server naps/is rebooting during a scheduled run, the bot realizes it missed a slot and runs immediately upon waking up.#FediMeteo #SysAdmin #Python #FreeBSD #Coding #SelfHosted #OwnYourData #StayTuned
  • 0 Votes
    28 Posts
    49 Views
    No matter how you slice it, as I see it, it boils down to: Microsoft's software did insufficient input validation on untrusted data (specifically in this case configuration changes for one customer, it seems), and this led to widespread outages affecting many, many, *many* customers in many different ways.Security done properly should not rely on "blocking erroneous" stuff, but should verify that everything is good and only *if* that succeeds allow any of it through.@spytfyre @rysiek
  • 0 Votes
    1 Posts
    10 Views
    New blogpost: Using a SSH config: https://h3artbl33d.nl/blog/using-a-ssh-config#OpenBSD #OpenSSH #SysAdmin