One for Nightshade, Tecromancer, Unixguy
Good afternoon guys
I am working on a Ubuntu Server project my progress so far is I have installed the operating system in a RAID1 configuration I have enabled the root account, updated the packages, configured a static IP address and have installed SSH for remote access the server is currently running headless.
My next challenge is securing the box and as we speak I am probably being hacked to death as I have no security or hardening on there at the moment. The questions I have are below.
When dealing with a fresh server install what are the first things you do / lockdown this would be a great help!
1) Root Access best approach should I disable the root account and setup a user with admin privilages
2) SSH best approach to secure? change the port number? key authentication?
3) Firewall best iptables or UFW? I want something easy to configure
4) Fail2ban? any good noob freindly guides
5) On Red Hat derivatives you have chkconfig is there a similar utility for Ubuntu to view all services
Any guides / best approaches on basic server hardening / securing would be greatly appreciated
