Who am I?

Welcome to my blog, my name is Lyubomir and here I share some of the problems I am dealing with in my infrastructure. My lead principle when looking for a solution is to be as simple as possbile or as it is known - KISS principle.

Collecting and blocking IP addresses of failed login attempts

Today we gonna explore a interesting security issue and solution for it. While most organization are using centralized logging and centralized firewalls, services running on standalone servers or VMs have been always a target to malicious actors. In today post we will dive into authentication failures and ways to protect ourselves from those. In our scenario we will be protecting a mail server, which is running postfix and dovecot locally. However the method described here is not limited to the services mentioned above and can be applied to a large number of others.

[Read More]

How to run Redis on Rocky Linux 10

Using Redis for caching on Rocky Linux 10 is not as straight forward as it looks. The Redis package is removed from the official repositories and if you want to install it you need Remi repo, which is one of the options to run Redis. However in this case we will go for another option and install it in a container. Redis will be used only locally so no authentication will be configured.

[Read More]