Security

SSH is one of the first services I lock down on a new server because it is usually the front door to everything else. If SSH is weak, the rest of your hardening work starts from a bad premise. If SSH is solid, you at least force attackers into harder, noisier, or less direct paths. […]

UFW (Uncomplicated Firewall) is the default firewall management tool on Ubuntu. It’s a frontend to iptables that makes common firewall tasks manageable without having to write iptables rules directly. I use it on most of my Ubuntu servers — it handles the 95% case well and doesn’t get in the way. Installation and Initial State

DNSSEC is one of those technologies that looks straightforward in diagrams and feels much less straightforward the first time you enable it on a live zone. The promise is clear: protect DNS answers from tampering and cache poisoning. The operational reality is also clear: if you get the signing or delegation wrong, validating resolvers can