How do you protect a linux host?

r00igev@@r said:
The SD-WAN software I use has made the transition but I still use the legacy tools when I need to do something myself. I'll need to pull my finger.:rolleyes:
Click to expand...
Which SD-WAN software is it ? Is it open source ?
 
Did so involuntarily with some in place upgrades from rhel7 to 8, but all still administered by firewalld so only had one weird issue with some traffic going down the wrong chain so far
 
The first thing I do when I setup a new Linux VPS is disable SSH passwords and only use SSH keys. Then I install Wireguard and setup a VPN tunnel and setup the firewall to DENY ALL on the INPUT chain and slowly start adding firewall rules above that if necessary. Obviously I only SSH over the Wireguard VPN. The nice thing about most VPS's is that if you accidentally lock yourself out of your server there is usually a VNC option in the control panel of your hosting provider that gives you shell access to the server in an emergency.
 
It integrates with iptables using ipset with separate processes that manage and feedback attacks into their system.

I can't see why it wouldn't work for you, if you have questions chat to their team they have always been very forthcoming with me.
 
warwickw said:
It integrates with iptables using ipset with separate processes that manage and feedback attacks into their system.

I can't see why it wouldn't work for you, if you have questions chat to their team they have always been very forthcoming with me.
Click to expand...
Do you have an interface to interact with it ?
 
I was just reading through some of the CIS Benchmarks (you know, cause I wanted something fun to do on a Sunday! :ROFL:)

They're free with registration and might be useful to some reading this thread.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X