I have a debian dedicated server. I'm trying to secure it and one way I thought would be good is to shut down services I dont need, like FTP for example.
I am suggesting to run something like this on deployment:
service ntp stop update-rc.d -f ntp remove service vsftpd stop update-rc.d -f vsftpd remove service xinetd stop update-rc.d -f xinetd remove
I am new to this. Is it generally regarded as poor security to do this, and lock it down the services with
iptables, or is removing the service completely advisable and ultimately more secure?