Skip to content

Instantly share code, notes, and snippets.

View jab4's full-sized avatar
💭
Oh well...probably just nothing.

jab4

💭
Oh well...probably just nothing.
  • Germany, St. Ingbert
View GitHub Profile
@jab4
jab4 / why-greylisting-is-bad.md
Created February 7, 2022 18:36
Running a mail server? Don't use Greylisting.

Don't use Greylisting.

When postgrey https://postgrey.schweikert.ch/ started out in 2004, it probably happened with all good intentions: Legit mail comes from legit Postfix (or Sendmail, Exim, Exchange, ...) instances, retrying mail delivery upon encountering a 450 tempfail error, while most bad mail originated from scriptkiddies' tools with mediocre knowledge of the inner workings of SMTP and the Internet itself.

Postgrey has its ups and downs, and back in the days with only a fraction of today's mail volume, it really helped to stop many spam messages right in their tracks.

Fast forward to the 2020s. Spambot authors have become more sophisticated. They use hacked accounts at GMail and Microsoft's derivatives of Hotmail, whitelisted by many on domain level. They create spam using real other people's real signatures. They go as far as using your own company's signatures, sucked off a hacked correspondent's mailbox, to pretend they are a workmate of yours. They still use zombie boxes to send mail.

@jab4
jab4 / PHP-MariaDB-Performance.md
Last active January 2, 2022 01:14
PHP-MariaDB DB Engine INSERT Performance comparison (2022-01-01) (Ubuntu 21.10)

Just another MariaDB performance test script

System: ESXi Virtual Machine

  • Ubuntu 21.10 Impish (Linux 5.13.0-22-generic)
  • File system: btrfs
  • CPU: Intel(R) Xeon(R) CPU E5-2667 v4 @ 3.20GHz (family: 0x6, model: 0x4f, stepping: 0x1)
  • under vmware ESXi 7.0 (with VMware PVSCSI rev 2 storage controller)
  • CPU cores: 8
  • VM RAM: 8 GB