Debian Unstable

Line 19:

** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references

* Install mcelog. Edit <tt>/etc/default/mcelog</tt>, adding "--syslog_error" to DAEMON_OPTS.

* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.

====networking-related====

* Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.

** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay

* Unless the machine is intended as a mail server, set up a smarthost with <tt>ssmtp</tt>, purging <tt>Postfix</tt>/<tt>Exim</tt>

* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.

* Install openssh-server. Disable password-based authentication (use only keys).

** Debian already ships OpenSSH configured to use Protocol 2 only.

** Optionally disable reverse DNS lookups: <tt>UseDNS no</tt>

** Optionally disable password-based auth: <tt>PasswordAuthentication no</tt>

* Add <tt>iptables</tt> rules to <tt>/etc/network/interfaces</tt>

** Filter unused RFC 1938 addresses via the RAW table and [http://ipset.netfilter.org/tips.html ipset]

** Filter INVALID and UNKNOWN states via the INPUT table (if appropriate) (requires connection tracking)

* Enable IPv4 and IPv6 forwarding, if appropriate, in <tt>/etc/sysctl.conf</tt>:

** <tt>net.ipv4.ip_forward=1</tt>

** <tt>net.ipv6.conf.all.forwarding=1</tt> (note: disables Stateless Address Autoconfiguration!)

==Multiuser==

* Clone my home directory from https://github.com/dankamongmen/dankhome.git

Debian Unstable: Difference between revisions

Dank (talk | contribs)

@@ Line 19: / Line 19: @@
 ** If not, retrieve them using <tt>blkid</tt>, and replace the /dev references
 * Install mcelog. Edit <tt>/etc/default/mcelog</tt>, adding "--syslog_error" to DAEMON_OPTS.
+* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
+====networking-related====
 * Install ntpd. Edit <tt>/etc/default/ntp</tt>, changing NTPD_OPTS to '-g -x'.
 ** This allows the clock to be arbitrarily set once (presumably on startup), without slew delay
 * Unless the machine is intended as a mail server, set up a smarthost with <tt>ssmtp</tt>, purging <tt>Postfix</tt>/<tt>Exim</tt>
-* Install <tt>mingetty</tt>. Open <tt>/etc/inittab</tt> and convert 'getty 38400' to 'mingetty'.
 * Install openssh-server. Disable password-based authentication (use only keys).
 ** Debian already ships OpenSSH configured to use Protocol 2 only.
 ** Optionally disable reverse DNS lookups: <tt>UseDNS no</tt>
 ** Optionally disable password-based auth: <tt>PasswordAuthentication no</tt>
+* Add <tt>iptables</tt> rules to <tt>/etc/network/interfaces</tt>
+** Filter unused RFC 1938 addresses via the RAW table and [http://ipset.netfilter.org/tips.html ipset]
+** Filter INVALID and UNKNOWN states via the INPUT table (if appropriate) (requires connection tracking)
+* Enable IPv4 and IPv6 forwarding, if appropriate, in <tt>/etc/sysctl.conf</tt>:
+** <tt>net.ipv4.ip_forward=1</tt>
+** <tt>net.ipv6.conf.all.forwarding=1</tt> (note: disables Stateless Address Autoconfiguration!)
 ==Multiuser==
 * Clone my home directory from https://github.com/dankamongmen/dankhome.git