linux


saslfail: Escalating Fail2ban Bans for Postfix SASL Authentication Attacks

Standard fail2ban bans just get waited out. saslfail uses escalating bans — 48 hours, 8 days, 32 days — backed by a persistent SQLite database that survives restarts and remembers

Hardening a WordPress Server in an Afternoon

Most WordPress hardening guides are bloated with solved problems. This is the version for self-hosters who want to spend an afternoon on what actually matters: permissions, auth, and server config.

Why Your Apache Cipher Suite Probably Has RC4 in It

If your Apache SSL config is a few years old, RC4 is probably still in it. Modern browsers skip it, but scanners flag it and it should go. Here's how

Managing WordPress with Git: What Actually Works

WordPress and git work fine together if you know what to version control. The trap nobody warns you about: FSE template edits that silently land in the database instead of

Train spamassassin using amavis under Ubuntu

If you run amavis, sa-learn won't see live mail the way spamd would. Here's how to collect misclassified messages from your mail client and feed them to SpamAssassin's Bayes classifier