Server Checklist
Server Checklist
| Step | √ | To Do |
Preparation |
||
| 1 | Install the server image | |
| 2 | Add additional repositories | |
System Update |
||
| 3 | Update with the latest updates | |
| 4 | Configure automatic updates | |
| 5 | Configure network time protocol (NTP) | |
Process Hardening |
||
| 6 | Restrict core dumps | |
| 7 | Enable randomized virtual memory region placement | |
OS Hardening |
||
| 8 | Remove legacy services (e.g., telnetserver; rsh, rlogin, rcp; ypserv, ypbind; tftp, tftp-server; talk, talkserver) | |
| 9 | Disable or remove server services that are not going to be utilized (e.g. FTP, DNS, LDAP, SMB, DHCP, NFS, SNMP, etc.) | |
Network Security and Firewall Configuration |
||
| 10 | Firewall Configuration | |
Remote Administration Via SSH |
||
| 11 | Set SSH protocol to 2 | |
| 12 | Disable SSH root login | |
| 13 | Set SSH permitemptypasswords to no | |
System Integrity and Intrusion Detection |
||
| 14 | Install and configure Fail2Ban | |
| 15 | Install and configure AIDE | |
Anti-Virus Considerations |
||
| 16 | Install and enable anti-virus software | |
| 17 | Configure daily scan |