Differences

This shows you the differences between two versions of the page.

--- part_1 [2025/03/01 19:53] – wizardadmin
+++ part_1 [2025/03/01 20:01] (current) – wizardadmin
@@ Line 2: / Line 2: @@
 {{:lock.jpeg?400|}}
-{{:finished_diagram.png?600|}}
+{{:finished_diagram.png?800|}}
 This is a diagram of what i have in mind to secure this webserver.
@@ Line 9: / Line 9: @@
 . Disable logging in as root
-. Configure SSH to use a random port and not serve over port 22
+. Configure SSH to use a random port and not connect over port 22
 . Lockdown logins by forcing logins with a public/private keypair instead of passwords, and disable password logins completely.
@@ Line 15: / Line 17: @@
 These i will not discuss but am happy to discuss in a professional environment (Job interview, job meetings)
-After hardening the Debian server as much as i knew, i moved onto the next steps in terms of security. A firewall!
+After hardening the Debian server as much as i knew, i moved onto the next steps in terms of security. A firewall! See:[[opnsenseconfiguration|]] to see the basic configuration that i setup.
 I went with a OPNSense firewall that again i hand built to fit into a 2u server chassis. Loaded OPNsense onto and got to work. My idea for this was that i would take advantage of OPNsense's Firewall and routing capabilities to combine it into a router/firewall.