Linux Hardening

Security Linux SSH

Just a couple things to take care of to make it safer

Automate Upgrades

sudo apt install unattended-upgrades
nano /etc/apt/apt.conf.d/50unattended-upgrades
uncomment the following lines:
"origin=Debian,codename=${distro_codename}-updates";
"origin=Debian,codename=${distro_codename}-proposed-updates";
sudo dpkg-reconfigure --priority=low unattended-upgrades

/etc/ssh/sshd_config changes

  • change Port
  • PermitRootLogin no
  • AllowUsers only_those_you_trust
  • PasswordAuthentication no
  • Fail2Ban

Firewall Whitelist

  • Block ICMP and everything else
  • allow the necessary stuff

I'll keep adding stuff to this Page until im satisfied,
but dont expect this to actually make your system 100% safe.. there's never 100%

Previous Post Next Post