[2026|09|05] SSH Keys vs Passwords | And Key Management [Linux] | 1 min read Why keys beat passwords, the passphrase question, and how to not lose the key to your own server.
[2026|09|05] Hardening a Linux Box, Part 2 | Audit and Incident Response [Linux] | 1 min read Know what runs, keep logs that survive, and have a plan for the night something actually happens.
[2026|09|05] iptables from Scratch: Part 3 | NAT and Port Forwarding [Linux] | 1 min read Masquerade, DNAT and the one-liner that lets a whole LAN hide behind a single public IP.
[2026|09|05] iptables from Scratch: Part 2 | Writing a Policy [Linux] | 1 min read Default deny, state tracking and the exact commands that turn a bare VPS into a closed box.
[2026|09|05] iptables from Scratch: Part 1 | Tables, Chains, Targets [Linux] | 1 min read The three moving parts behind every iptables rule, and what -A, -I and -j actually do.
[2026|09|05] dnscrypt-proxy: Automating the Firewall with nftables Sets [Linux] | 2 min read Blocking domains by hand is a losing game. Dynamic nftables sets turn a blocklist into a live firewall rule.
[2026|09|05] SSH Brute Force: What the Logs Actually Say [Linux] | 2 min read What those thousands of failed logins really are, how to read the pattern, and why a key is the end of the story.
[2026|09|05] nftables: First Contact [Linux] | 2 min read The modern Linux firewall in three rules: tables, chains and the verdicts that make default deny easy.
[2026|09|05] SSH Tunnels: A Poor Man's VPN [Linux] | 2 min read Local, reverse and jump-host forwarding: one encrypted pipe for every network you cannot reach.
[2026|09|05] Hardening a Linux Box: Field Notes, Part 1 [Linux] | 2 min read Updates, SSH, firewall: the boring first hour that decides whether your box survives the internet.
