[tor-talk] Any updates on hardening a Debian VPS?

[notfriendly at riseup.net]

On 2016-06-05 18:35, I wrote:
> What are the current best things to do to a Debian VPS to stop being
> puppeted by clever dicks?
> 
> Robert

I have a few suggestions:

* Use SSH Key Based Authnication only (no password based login)
* Update your software frequently
* Enable IPTables and only allow ports that you utilize, if you have a 
static ip address only allow connections to ssh from that ip address
* Enable Tripwire to detect changes to system files

Good luck with securing your VPS