Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm interested in the steps you make when you need to set up a new Linux (preferably CentOS) server, putting a emphasis on security, like changing SSH port, limiting root SSH access, etc.

share|improve this question

closed as not a real question by mdpc, Iain, Zoredache, sysadmin1138 Nov 14 '11 at 18:42

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

    
    
This question is far too broad, even for general best-practices. The link Zoredache posted is a good start. –  sysadmin1138 Nov 14 '11 at 18:42

1 Answer 1

I usually don't change SSH port, because it complicates setups (now I should remember which port I use on which server and I have 20+ of them) and confuses me and my customers. I use DenyHosts instead, it is available from an EPEL repo. It's also good to disable password-based authentication in favor of key-based in sshd_config (PasswordAuthentication no and PubkeyAuthentication yes), at least for the root account (PermitRootLogin without-password). Of course empty passwords should be disabled, but I think it's a default setting nowadays (PermitEmptyPasswords no).

share|improve this answer
    
thanks for the tip. any other steps? :) –  feketegy Nov 14 '11 at 19:17

Not the answer you're looking for? Browse other questions tagged or ask your own question.