<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel>
<title>rickvanderzwet.nl - tag: security</title>
<link>https://rickvanderzwet.nl/</link>
<description>Blog posts tagged &#x27;security&#x27; (subset of rickvanderzwet.nl)</description>
<item>
<title>SSH concentrator with port knocking behind NAT</title>
<link>https://rickvanderzwet.nl/blog/2026/10/12/ssh-concentrator-port-knocking/</link>
<description> ## Introduction I run a backup machine at a remote location: stuck behind NAT, no control over the upstream firewall. What works for me is a reverse SSH tunnel to a machine I do control, with port knocking in front of the tunnel endpoint. An earlier attempt at knocking here had been running for yea...</description>
<pubDate>Mon, 12 Oct 2026 21:46:00 +0000</pubDate>
<guid>https://rickvanderzwet.nl/blog/2026/10/12/ssh-concentrator-port-knocking/</guid>
</item><item>
<title>Hardening TLS webserver to be 100% with internet.nl</title>
<link>https://rickvanderzwet.nl/blog/2021/04/28/hardening-web-services/</link>
<description> Following the SIDN blogposts on [implementing SPF, DKIM and DMARC in PostFix](https://www.sidn.nl/en/news-and-blogs/hands-on-implementing-spf-dkim-and-dmarc-in-postfix) and [implementing DANE in Postfix](https://www.sidn.nl/en/news-and-blogs/hands-on-implementing-dane-in-postfix) I got myself inter...</description>
<pubDate>Wed, 28 Apr 2021 14:53:00 +0000</pubDate>
<guid>https://rickvanderzwet.nl/blog/2021/04/28/hardening-web-services/</guid>
</item>
</channel></rss>
