Tag Info

New answers tagged


the only way to really do this is to have a log record that actually "leaves" your system. and the more copies there are the better. A simple example setup could be: - Main Server with login. - secondary 'Logging' server that receives all Syslog events from the main server (and possibly others) - A separate Mail server. - An external mail server (like ...


Some starting points which are by no means an exhaustive list (I will edit the post as people comment; and credit them too): Firewall - only allow access to ports that explicitly require it (in your case probably only SSH and HTTP/S). I've linked to UFW because it's easy. Disable root login - furthermore consider limiting to a particular set of users - you ...

Top 50 recent answers are included