<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN">
<html><body style='font-family: Verdana,Geneva,sans-serif'>
<p>Hi Craig,</p>
<p>Fail2Ban, key only login, firewall, and timely updates will probably cover 99% of your risks (although I'd also suggest disabling / removing any unused services), however if you want to go further this is an excellent guide to linux security; http://crunchbang.org/forums/viewtopic.php?id=24722 .</p>
<p>Cheers,</p>
<p>Dan</p>
<p>On 2014-02-06 07:04, Craig C-S wrote:</p>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<div dir="ltr">Thanks all for the advice!
<div> </div>
<div>Things to do:
<div>- I'll be looking to run Moxie Marlinspike's knockknock daemon soon as that seems like a superior solution to port knocking and rate limiting. (big fan of his work on TextSecure and RedPhone!)</div>
<div>- Run OpenSSH as a hiddenservice. This seems obvious now but had not occurred to me.</div>
<div>- Look into Fail2Ban and DenyHosts and implement them.</div>
<div> </div>
<div>Done and thank you for the reminders!</div>
<div>- Automated daily updates via emerge</div>
<div>- Server hardening done with hardened-gentoo</div>
<div>- Moved to key auth for ssh</div>
<div> </div>
<div>Alan:</div>
<div>I'll keep you and the community updated if <a href="http://soyoustart.com">soyoustart.com</a> (OVH) has any problem with the exit. Beyond forgetting to ban exits to 25 they have not said anything!</div>
<div> </div>
<div>Thanks Alan, David and Robert!</div>
<div> </div>
<div>Craig</div>
<div> </div>
<div> </div>
</div>
</div>
<div class="gmail_extra"><br /><br />
<div class="gmail_quote">On Wed, Feb 5, 2014 at 5:12 PM, I <span><<a href="mailto:beatthebastards@inbox.com">beatthebastards@inbox.com</a>></span> wrote:<br />
<blockquote class="gmail_quote" style="margin: 0 0 0 .8ex; border-left: 1px #ccc solid; padding-left: 1ex;">Also, if you know how set the operating system to update automatically to keep it secure.<br /><br /> Robert<br />
<div class="HOEnZb">
<div class="h5"><br /><br /> _______________________________________________<br /> tor-relays mailing list<br /><a href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a><br /><a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a></div>
</div>
</blockquote>
</div>
</div>
<br />
<pre>_______________________________________________
tor-relays mailing list
<a href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a>
<a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a>
</pre>
</blockquote>
<p> </p>
<div>-- <br />
<div>Dan Rogers</div>
<div>+44 7539 552349<br /><a>skype: dan.j.rogers</a></div>
<div><a href="https://secure.techwang.com/gpg/public_key.txt">gpg key</a></div>
<div><a href="http://www.linkedin.com/in/danrogerslondon" target="_blank">linkedin</a> | <a href="http://www.songkick.com/users/music-is-math" target="_blank">songkick</a> | <a href="http://twitter.com/danjrog" target="_blank">twitter</a> | <a href="http://open.spotify.com/user/bonkbonkonk" target="_blank">spotify</a> | <a href="http://holdingitwrong.com" target="_blank">music</a></div>
</div>
</body></html>