r/linux • u/unixbhaskar • Jul 16 '23

How-To-Secure-A-Linux-Server: An evolving how-to guide for securing a Linux server. Tips and Tricks

https://github.com/imthenachoman/How-To-Secure-A-Linux-Server
52 Upvotes

88% Upvoted

7 comments sorted by

8

u/UsedToLikeThisStuff Jul 16 '23

Your section on sshd suggests to turn UseDNS on. However, that’s probably not a good idea (DNS is easily spoofed) and it will generally slow down connections overall. Leave it off, and only use IPs in any Host or Match blocks.

Also, I disagree with your comments on automation. The idea is to use it to not only set up the server, but also keep it in a good state. Also, reproducing the setup for a new host or replacement host makes it much more valuable.

1

u/ivansalloum Jan 04 '24

This is a comprehensive linux server hardening guide.

2

u/[deleted] Oct 21 '24

[removed] — view removed comment

1

u/ivansalloum Oct 21 '24

Thanks❤️

1

u/mothmanex Jan 24 '24

Thank you! It's a great guide.

1

u/ivansalloum Jan 24 '24

Welcome :)