I have a debian dedicated server. I'm trying to secure it and one way I thought would be good is to shut down services I dont need, like FTP for example.
I am suggesting to run something like this on deployment:
service ntp stop
update-rc.d -f ntp remove
service vsftpd stop
update-rc.d -f vsftpd remove
service xinetd stop
update-rc.d -f xinetd remove
I am new to this. Is it generally regarded as poor security to do this, and lock it down the services with iptables
, or is removing the service completely advisable and ultimately more secure?
ntp
orxinetd
internally, though.