I have been looking at hardening *nix servers for my lab and maybe carry some of that over to work. CIS benchmarks are something I like doing but that's barely scratching the surface. What do you do for your servers?

I have Lynis, systemd-analyze, Kernel self protection in mind but I'd love to hear your thoughts. Bonus points for the most paranoid setups!

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 year ago

I have used this with second port for handshake (with no info in heading and 20 second times) and then the final port opens with key exchanged from handshake.

  • source
  • parent