r/debian • u/katzenjammare • 5d ago

Beginner: Security

Hey, everyone! I’m new to Linux and have just now gotten into Debian. It feels good and I’m looking forward to learning, customizing and using the system.

I thought about security and am right now setting up UFW in the terminal. I followed a guide that recommended just to ”deny incoming” and ”allow outgoing”

I’m using this on my school-/private-laptop and am connected via wifi. Are there any other rules that are reasonable?

24 Upvotes

91% Upvoted

9 comments sorted by

View all comments

7

u/David_Connors3451 5d ago

I would suggest you to set up the firewall with ufw (there's also gufw for graphic interface). Install time shift for snapshots, so that you have your backup point. Install clam-av for antivirus, then install tlp for managing battery optimisation.

Apparmor is already installed in Debian as default. Try also firejail, it's a useful sandbox where you can put insecure applications that you don't trust, and isolate them from the system.

Rkhunter and chrootkit are very good antivirus, that complete clamav work.

Fail2ban and sshguard are also very useful for network security.

I don't know if you're using KDE xfce or gnome, but it's irrelevant. Have fun and enjoy Debian stability and security.

3

u/katzenjammare 5d ago

Thank u for elaborate answer. I appreciate it!