Run as few IP server services as possible. A good bet is: sshd, sendmail and httpd.
Don't run telnetd, ftpd, popd, imapd, or anything else that sends passwords in the clear.
Use appropriate conf files to restrict ssh access if possible.
Make sure you're running recent versions of sendmail, majordomo, etc.
Be paranoid. Configure your machine to send you email at the first sign of trouble. (Newer versions of FreeBSD do this out of the box; don't know about LiGNUx.)
Ready? Here it is:
int i;
Those bastards!
Just thought I would clear that up.
If you're connecting a unix box to the Internet:
Run as few IP server services as possible. A good bet is: sshd, sendmail and httpd.
Don't run telnetd, ftpd, popd, imapd, or anything else that sends passwords in the clear.
Use appropriate conf files to restrict ssh access if possible.
Make sure you're running recent versions of sendmail, majordomo, etc.
Be paranoid. Configure your machine to send you email at the first sign of trouble. (Newer versions of FreeBSD do this out of the box; don't know about LiGNUx.)