How do I configure my systems?

• I configure my machines using the following guidelines:

  • Debian/GNU Linux
    • sid (unstable) for general use, woody for critical boxes.
    • Custom kernel with
      • International kernel patch
      • OpenWall security patch (2.2.x only)
      • ext3 patch (2.2.x only)
    • No services in inetd.conf, NFS, portmap turned off
    • Iplogger
    • Snort
    • Scandetd
    • OpenSSH, OpenSSL

Notes: