s83/privacy-guides
1
0
Fork 0
mirror of https://github.com/sunknudsen/privacy-guides.git synced 2025-02-23 01:03:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added Debian 11 (bullseye) support

Browse Source
This commit is contained in:
Sun Knudsen 2021-11-27 11:17:15 -05:00
parent 43757ad652
commit 24ca5df635
No known key found for this signature in database
GPG Key ID: 1FA767862BBD1305
1 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
how-to-configure-hardened-debian-server/README.md
View File

@ -14,7 +14,7 @@ Listed: true
## Requirements ## Requirements
- Virtual private server (VPS) or dedicated server running Debian 10 (buster) - Virtual private server (VPS) or dedicated server running Debian 10 (buster) or Debian 11 (bullseye)
- Linux or macOS computer - Linux or macOS computer
## Caveats ## Caveats
@ -231,13 +231,15 @@ sysctl -p
### Step 16: install iptables-persistent ### Step 16: install iptables-persistent
When asked to save current IPv4 or IPv6 rules, answer `Yes`. When asked to save current IPv4 or IPv6 rules, answer “Yes”.
```shell ```shell
apt install -y iptables-persistent apt install -y iptables-persistent
``` ```
### Step 17: configure iptables ### Step 17: configure firewall
> Heads-up: if SSH connection is terminated, [log in](#step-8-log-in-as-server-admin) and [switch to root](#step-10-switch-to-root).
```shell ```shell
iptables -N SSH_BRUTE_FORCE_MITIGATION iptables -N SSH_BRUTE_FORCE_MITIGATION
@ -300,7 +302,7 @@ ip6tables -P INPUT DROP
ip6tables -P OUTPUT DROP ip6tables -P OUTPUT DROP
``` ```
### Step 18: log out and log in to confirm iptables didn’t block SSH ### Step 18: log out and log in to confirm firewall didn’t block SSH
#### Log out #### Log out
@ -327,11 +329,12 @@ When asked, enter root password.
su - su -
``` ```
### Step 19: make iptables rules persistent ### Step 19: make firewall rules persistent
```shell ```console
iptables-save > /etc/iptables/rules.v4 $ iptables-save > /etc/iptables/rules.v4
ip6tables-save > /etc/iptables/rules.v6
$ ip6tables-save > /etc/iptables/rules.v6
``` ```
👍 👍