Ubuntu

Linux Ubuntu commands after fresh install. Offers a more secure starting point for any new super user.

Firewall

(for servers)

sudo ufw allow ssh

and/or (for clients)

sudo ufw default deny incoming

sudo ufw enable

Check software download server addresses to all be https; go through updates setup & get Ubuntu Pro.

DNSCRYPT

sudo apt update

sudo apt upgrade

sudo apt install dnscrypt-proxy

usually unnecessary:

sudo apt enable dnscrypt-proxy

sudo systemctl restart dnscrypt-proxy

sudo systemctl restart NetworkManager

Set nameserver 127.0.2.1 (in Network Manager and/or add to /etc/resolv.conf)

sudo nano /etc/resolv.conf

nameserver 127.0.2.1

Tor

sudo apt install tor

sudo systemctl enable tor

Add to tor/torrc to route ALL traffic through tor:

sudo nano /etc/tor/torrc

VirtualAddrNetwork 10.192.0.0/10
AutomapHostsOnResolve 1
TransPort 9040
DNSPort 53

That completes a DNS server on port 53 (if dnscrypt-proxy fails) and Transparent proxy server: 127.0.0.1:9040

sudo systemctl restart tor

Turn proxy settings on.

Fail2BAN

(only if you use remote ssh)

sudo apt install fail2ban

sudo systemctl enable fail2ban

sudo systemctl restart fail2ban

Check directory for other Linux Ubuntu terminal tutorials ⭐ Stargaze to help others secure their Ubuntu install

http://frenzypenguin.media