up vote -3 down vote favorite
share [g+] share [fb]

Possible Duplicate:
Tips for Securing a LAMP Server

I'm going to run another Linux-based virtual server, and I think it would be great to have a checklist of things to do to ensure proper security.

There is another similar question (any security tips for my first server?), but I think it's worth starting a new one.

Things I'm looking for are:

  • disable root access by SSH
  • change default ports where possible (decreases bruteforce-like traffic)
link|improve this question
StackExchange style QnA sites to not work well with checklist style questions, and "starting another one" makes things worse not better. – Caleb Jul 2 '11 at 13:37
2  
See here and here and here for more duplicates. This has been covered. – Caleb Jul 2 '11 at 13:41
@Caleb I disagree with the checklist thing. However you are right with the duplicates. – cstamas Jul 2 '11 at 13:45
feedback

closed as exact duplicate by Caleb, Iain♦, Scott Pack, Andrew M., Ward Jul 2 '11 at 17:08

This question covers exactly the same ground as earlier questions on this topic; its answers may be merged with another identical question. See the FAQ for guidance on how to improve it.

2 Answers

up vote 1 down vote

James Turnbull has a great book on the subject, simply "Hardening Linux"

link|improve this answer
feedback
up vote 0 down vote

I disable outgoing ip connections every time I can. Most web based attacks involves downloading the exploit payload from the net.

This can protect from script kiddies.

EDIT Caleb: no. A compromised user account is one thing (and easily happens with buggy websites) in this case it is easy to locate and fix the issue. If with privilage escalation the root account is compromised the machine should be reinstalled. (I was talking about automated attacks.)

link|improve this answer
1  
If they have your machine going out to download code, it's already too late. Blocking OUTGOING traffic is something you do while you cleanup after a compromise, not something you do to protect yourself. – Caleb Jul 2 '11 at 13:46
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.