email-security


saslfail: Escalating Fail2ban Bans for Postfix SASL Authentication Attacks

Standard fail2ban bans just get waited out. saslfail uses escalating bans — 48 hours, 8 days, 32 days — backed by a persistent SQLite database that survives restarts and remembers

Parsing DMARC Reports with parsedmarc, Elasticsearch, and Kibana

Your domain is probably being spoofed right now. DMARC reports tell you exactly how — but they arrive as unreadable XML. parsedmarc, Elasticsearch, and Kibana turn them into something actionable.