Skip Navigation
Suggestions for Improving Linux Server Security: Beyond User Permissions and Groups?
  • I would reconsider docker because if a specific application leaks some sort of shell access or system file access you'll be protected out side of container host escalation.

    Unrelated to security, I prefer docker because it leaves the server very clean if you remove different apps. Can also save time configuring more complex applications or applications that conflict with system libraries.

    Add fail2ban on your list of applications it watches logs for invalid logins and puts them on firewall block rules after so many failed attempts.

  • I'm at a loss on what server to buy
  • I made the jump to a full server a few years ago and there's some pretty high limits but you can get them spec'ed pretty low. Something like a dell r730 Single 8 core xenon 32gb ram and a couple tb of storage running 4-500$. They can be upgraded over time to be dual 16 core xenon 1tb ram and petabyte of storage.

  • What is the better game...The Legend of Zelda: Ocarina of Time or Final Fantasy VII?
  • It's really gameplay vs story. Ott heavy on game play where ff7 can be like reading a book. nothing really revolutionary about its game play some beautiful backgrounds and a deep storyline. Ott has some seriously revolutionary 3d interactions.

  • dnscrypt-proxy2 routed through tor
  • Is this whatismyip address on the dns server that should have all its traffic going through tor or just DNS? what is my ip address works by responding with the ip address that is connecting to it. If you are only trying to have dns go over tor what is my ip would respond with a non tor ip address but if all traffic is going through tor then yes something is not working.

    Edit: Reading more in depth of your post 100% whatismyipaddress will not return your tor ip. You've just offloaded name resultion ie. www.google.com is 123.123.123.123 ip address. You are still connecting to websites with your ISP ip.

  • Nearly half of cancer patients have more than $5,000 in medical debt, even though most are insured
  • Been on high deductible for 9 years moved to a medium level traditional plan. I feel like I'm spending the same amount of money just less bills to deal with. Only time I can see it being cheaper is if you have something chronic.

  • STOP DOING DEPENDENCY INJECTION
  • When we implemented it significantly improved our ability to write unit tests. It also allowed us to make more modular code due to the default of every class having an interface. So I'm all for it.

  • InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EP
    epyon22 @programming.dev
    Posts 0
    Comments 87