How I spend my first 5 minutes on a server
I went through the article and then read every single post on this thread.  I am not a security expert so I won't even try to contribute except to say that I see a lot of people offering criticism without taking the extra step of explaining how they would go about hardening a fresh Linux install (or a pile-o-servers in a rack, whatever is applicable).<p>It'd sure be nice for those of us who are not security experts to read alternative approaches rather than, paraphrasing and not picking on anyone, "using a firewall is dumb" or "blocking ssh is pointless".<p>I like isolated ideas such as using a script to completely automate the provisioning of new boxes.  Kind of a no-brainer if you ask me.  The problem is that such recommendations are not followed by something like "Here's the script I use on Ubuntu 12.04 LTS".<p>How about it guys?  Would you care to attempt to produce a canonical HN "How to harden your server" reference?<p>Maybe one of the security experts on HN can start a repository on Github to evolve a canonical script.  I'm pretty much 100% Ubuntu 12.04 LTS, so it is my hope that this is one of the platforms that is addressed.<p>I did some looking around and this is what I found (I am in no position to evaluate the merits of any of these at anything beyond an intermediate level):<p><a href="https://github.com/bluedragonz/server-shield" rel="nofollow">https://github.com/bluedragonz/server-shield</a><p><a href="https://github.com/eglimi/linux_hardening" rel="nofollow">https://github.com/eglimi/linux_hardening</a><p><a href="http://www.cyberciti.biz/tips/linux-security.html" rel="nofollow">http://www.cyberciti.biz/tips/linux-security.html</a><p><a href="http://ubuntuforums.org/showthread.php?t=1002167" rel="nofollow">http://ubuntuforums.org/showthread.php?t=1002167</a><p><a href="http://www.thefanclub.co.za/how-to/how-secure-ubuntu-1204-lts-server-part-1-basics" rel="nofollow">http://www.thefanclub.co.za/how-to/how-secure-ubuntu-1204-lt...</a><p><a href="http://www.andrewault.net/2010/05/17/securing-an-ubuntu-server/" rel="nofollow">http://www.andrewault.net/2010/05/17/securing-an-ubuntu-serv...</a><p><a href="http://ubuntuforums.org/showthread.php?t=1919111" rel="nofollow">http://ubuntuforums.org/showthread.php?t=1919111</a><p><a href="https://help.ubuntu.com/12.04/serverguide/security.html" rel="nofollow">https://help.ubuntu.com/12.04/serverguide/security.html</a><p><a href="http://www.sans.org/score/checklists/linuxchecklist.pdf" rel="nofollow">http://www.sans.org/score/checklists/linuxchecklist.pdf</a><p><a href="http://nvd.nist.gov/scap/content/stylesheet/scap-rhel5-document.htm" rel="nofollow">http://nvd.nist.gov/scap/content/stylesheet/scap-rhel5-docum...</a><p><a href="http://blogs.csoonline.com/ubuntu_lts_vulnerability_scrub_against_national_vulnerability_database_nvd_nist_gov" rel="nofollow">http://blogs.csoonline.com/ubuntu_lts_vulnerability_scrub_ag...</a><p><a href="http://ubuntuforums.org/showthread.php?t=510812" rel="nofollow">http://ubuntuforums.org/showthread.php?t=510812</a>