I know most of the general advice: "turn off unnecessary services", "no really, turn off unnecessary services", "least privilege", etc. I've also seen a few guides and/or tools, e.g., Bastille, for hardening Linux boxes, but nothing that seems tailored to NetBSD.
Assume for the sake of this list that I've already made sure
root doesn't have SSH access, but that I haven't installed any server software.
What are your first steps for securing a new NetBSD box?
UPDATE: To be clear, I'm looking for specific steps. I'm entirely self-taught when it comes to server admin, but I feel I have a decent grasp of the general principles. I'm looking for details for two reasons:
- To see if there is anything NetBSD-specific that I've overlooked.
- To see if other people have better methods for putting the general principles into practice.