On Sun, 18 May 2025 21:52:46 -0700
Gregory Nowak via Dng <dng@???> wrote:

> On Sun, May 18, 2025 at 08:08:50AM +0700, Radhitya via Dng wrote:
> > the question is, if you were me, how would you maintain the security (a
> > paranoid answer is more preferred to scale up my skill)
>
> Bind services only to necessary interfaces. Setup a firewall to close
> off anything that shouldn't be public facing. Setup tripwire,
> logcheck. Adjust sysctl settings as appropriate. Setup fail2ban.
>
> Greg
>
>

Hi,
I use arno-iptables-firewall to setup all my firewalls.
It is easy, robust, uses sysvinit and allows all kinds of customizations.

Ciao,
Tito