Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Possible Duplicate:
Tips for Securing a LAMP Server

I'm going to run another Linux-based virtual server, and I think it would be great to have a checklist of things to do to ensure proper security.

There is another similar question (any security tips for my first server?), but I think it's worth starting a new one.

Things I'm looking for are:

  • disable root access by SSH
  • change default ports where possible (decreases bruteforce-like traffic)
share|improve this question

marked as duplicate by Caleb, Iain, Scott Pack, Andrew M., Ward Jul 2 '11 at 17:08

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

StackExchange style QnA sites to not work well with checklist style questions, and "starting another one" makes things worse not better. –  Caleb Jul 2 '11 at 13:37
See here and here and here for more duplicates. This has been covered. –  Caleb Jul 2 '11 at 13:41
@Caleb I disagree with the checklist thing. However you are right with the duplicates. –  cstamas Jul 2 '11 at 13:45

2 Answers 2

James Turnbull has a great book on the subject, simply "Hardening Linux"

share|improve this answer

I disable outgoing ip connections every time I can. Most web based attacks involves downloading the exploit payload from the net.

This can protect from script kiddies.

EDIT Caleb: no. A compromised user account is one thing (and easily happens with buggy websites) in this case it is easy to locate and fix the issue. If with privilage escalation the root account is compromised the machine should be reinstalled. (I was talking about automated attacks.)

share|improve this answer
If they have your machine going out to download code, it's already too late. Blocking OUTGOING traffic is something you do while you cleanup after a compromise, not something you do to protect yourself. –  Caleb Jul 2 '11 at 13:46

Not the answer you're looking for? Browse other questions tagged or ask your own question.