So I have thought a bit about hardening a Debian squeeze file & VPN server lately.Right now, we've placed the machine behind a firewall only allowing SSH connections from LAN, set a strong root password and installed unattended-upgrades to keep us fresh on those security fixes.What more should we do?
Hardening debian?
debian;security;hardening
Have a quick read of the more general Hardening Linux question over on Security Stack ExchangeIt includes guidance on removal of weak services, maintenance of security, links to SANS guidance etc., and while it is for general Linux, 90% of it will be absolutely appropriate for Debian.