Question: Can you provide additional default base security settings for working on the internet (not install software like fail2ban ...)?

I know is need to have these is important to do:

1. SELinux - set on Linux, kernel or system to Enforcing;
2. disable virtual consoles tty;
3. change message from /etc/issue and /etc/issue.net
4. get the ports with *netstat -tunlp* or *lsof -Pnl +M -i4* and set minimal;
5. set iptables rules;
6. set sudo permissions for default user;
7. disable root login for ssh in sshd\_conf with: PermitRootLogin no;
8. change the default ssh port for connection;

Answer: 
You need to compile the squid from source code with --enable-ssl-crtd --with-openssl, or simply install squid from this ppa <https://github.com/diladele/squid-ubuntu>, it already compiled with ssl enabled.
compiling from source is required otherwise use one of the pre-compiled images, if you plan to use this as a VM on vmware or virtualbox you can use the proxyeg bundle, [www.proxyeg.com](https://www.proxyeg.com/squidva/) This is squid, ClamAV and SSL options all enabled by default and installed on Ubuntu.