blog.icod.de

postfix rbl whitelist

By Darko Luketic | 16. June 2014 | 1 min read | 0 Comments |

create /etc/postfix/rbl_override

my@email.address OK
1.2.3.4 OK

1 2	my@email.address OK 1.2.3.4 OK

in /etc/postfix/main.cf under smtpd_client_restrictions add

check_client_access hash:/etc/postfix/rbl_override, reject_rbl_client zen.spamhaus.org,

1	check_client_access hash:/etc/postfix/rbl_override, reject_rbl_client zen.spamhaus.org,

so that it looks like

smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/etc/postfix/rbl_override, reject_rbl_client zen.spamhaus.org, reject_unknown_client_hostname

1	smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/etc/postfix/rbl_override, reject_rbl_client zen.spamhaus.org, reject_unknown_client_hostname

for instance then run

postmap /etc/postfix/rbl_override

1	postmap /etc/postfix/rbl_override

systemctl postfix restart

Read Article

Lifehacker censoring truthful comments

By Darko Luketic | 5. June 2014 | 3 min read | 0 Comments |

Do you know the lifehacker site? It’s better you don’t. If you’re now curious and would like to check it out at least turn on adblock. They wrote a comment about 4k monitors on their 4k monitor post yesterday before I went to bed since I just got my 4k monitor the same day and…

Read Article

A JWT keyserver written in Go

By Darko Luketic | 25. May 2014 | 1 min read | 0 Comments |

https://github.com/gomango/keyserver My own creation but it would not have been possible without https://github.com/dgrijalva/jwt-go Update this repo is no longer available because github chose to harass me and disable my account. The official reason was that I had more than 1 account. Well I deleted all my organizations and repos and the account, which’s username then…

Read Article

Go Private Public RSA

By Darko Luketic | 23. May 2014 | 1 min read | 0 Comments |

package main
import (
"crypto/rand"
"crypto/rsa"
"crypto/x509"
"encoding/pem"
"fmt"
)
type (
App struct {
Private *rsa.PublicKey
Public  []byte
//Secret     []byte
}
)
func main() {
app := new(App)
if err := app.GenerateKey(); err != nil {
panic(err)
}
privpem := pem.EncodeToMemory(
&pem.Block{
Type:  "RSA PRIVATE KEY",
Bytes: x509.MarshalPKCS1PrivateKey(app.Private),
},
)
fmt.Printf("%s\n", privpem)
pubbytes, err := x509.MarshalPKIXPublicKey(&app.Private.PublicKey)
if err != nil {
panic(err)
}
pubpem := pem.EncodeToMemory(
&pem.Block{
Type:  "RSA PUBLIC KEY",
Bytes: pubbytes,
},
)
fmt.Printf("%s\n", pubpem)
}
func NewApp() *App {
return &App{
PrivateKey: make([]byte, 0),
PublicKey:  make([]byte, 0),
//Secret:     make([]byte, 0),
}
}
func (this *App) GenerateKey() error {
if priv, err := rsa.GenerateKey(rand.Reader, 2048); err != nil {
return err
} else {
if err := priv.Validate(); err != nil {
return err
}
this.Private = priv
return nil
}
}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

package main

import (

"crypto/rand"

"crypto/rsa"

"crypto/x509"

"encoding/pem"

"fmt"

)

type (

App struct {

Private *rsa.PublicKey

Public []byte

//Secret []byte

}

)

func main() {

app := new(App)

if err := app.GenerateKey(); err != nil {

panic(err)

}

privpem := pem.EncodeToMemory(

&pem.Block{

Type: "RSA PRIVATE KEY",

Bytes: x509.MarshalPKCS1PrivateKey(app.Private),

},

)

fmt.Printf("%s\n", privpem)

pubbytes, err := x509.MarshalPKIXPublicKey(&app.Private.PublicKey)

if err != nil {

panic(err)

}

pubpem := pem.EncodeToMemory(

&pem.Block{

Type: "RSA PUBLIC KEY",

Bytes: pubbytes,

},

)

fmt.Printf("%s\n", pubpem)

}

func NewApp() *App {

return &App{

PrivateKey: make([]byte, 0),

PublicKey: make([]byte, 0),

//Secret: make([]byte, 0),

}

func (this *App) GenerateKey() error {

if priv, err := rsa.GenerateKey(rand.Reader, 2048); err != nil {

return err

} else {

if err := priv.Validate(); err != nil {

return err

}

this.Private = priv

return nil

}

Read Article

Secure AngularJS app

By Darko Luketic | 20. May 2014 | 1 min read | 0 Comments |

No one has a fucking clue how to write secure AngularJS apps. Prove me wrong! I’m sorry to contribute to the heap of spam on the internet with no real content, however this still seems to hold true almost 3 years later.

Read Article