Re: How can I secure a Debian installation?

[Raffaele Morelli <raffaele.morelli@gmail.com>]

2014-01-28 Joe <joe@jretrading.com>

On Mon, 27 Jan 2014 23:51:01 -0800
Jon Danniken <danniken@q.com> wrote:

> On 01/27/2014 09:41 PM, Scott Ferguson wrote:
> >
> > Keep updated, subscribe to the security list, read and follow the
> > fine manual:-
> > https://www.debian.org/doc/manuals/securing-debian-howto/
>
> Thanks Scott, that's just what I was looking for.
>

And so was Raffaele's reply. If you will be using ssh from outside, set
up keys and disable the use of passwords. Use a good password or phrase
on the private key, and keep it on a USB stick away from the laptop.
Laptops are easy to lose. If you need to use Windows, then make the
keys in puTTY, because as far as I know, puTTY still can't use OpenSSH
private keys but can make public ones.

Also AllowUsers directive in sshd_config should be set because If a user is not listed in there, login attempts stop suddenly at [preauth] level and you can use the form user@domain to futher restrict access.