Blogs
Fully IPv6 Enabled
Personal milestone: all public-facing services now dual-stack IPv6—anycast web, mail (SMTP/IMAP/POP3), DNS (authoritative/recursive), SSH/FTP, SSL VPN, SaltStack, Nagios, plus native home connectivity via HE tunnel.Deploying a Host-Specific Fail2Ban Config with SaltStack
Using SaltStack jinja templating to deploy custom fail2ban jail.local configs: mail server-specific protection for dovecot/postfix auth failures with iRedMail hardening policies.Major Internet Issues Today
August 12, 2014: IPv4 routes breach 512k triggering router crashes, Shaw Canada experiences nationwide routing failures, and AS701/AS705 de-aggregation event cascades through unfiltered peers.Unshortening with cURL
Using curl to reveal the final destination of shortened URLs before clicking: one-liner command with redirect following and a simple shell script wrapper for safe link verification.BGP Hijacking In News Again
Canadian ISP hijacks 51 prefixes to redirect cryptocurrency miners via unfiltered AS6939 peer: bogon routes, more-specifics targeting Digital Ocean/AWS, and lessons in prefix filtering failures.