Basic Security Linux 2018 Security configuration

[Daljeet]

DNS

1. Norton dns

Firewall

1. Ufw

VPN

1. NordVPN (IKEV2/IPsec)

Backup

1. Few different O.S bootable USB

Browser

1. Firefox with Ublock origin , Https everywhere
2. Chrome with True key
   
3. Multilogin App

Chrome is not for browsing it's for password manager only

Security

1. BIOS protection with password
2. Physical security (Very strict)
   
3. NO click and download policy
4. Guest user is disabled
5. Remote login -OFF

• Never click on any any link especially short link
  
• Check link on Virtual Machine only
• Nothing is downloaded from online especially Mp3,Mp4,Documents files ( Use google drive or VM)

Finding new ways to secure my machine ,every comment is appreciated

 

[RVS2]

Is Norton dns fast enough? Most people prefer Google dns (fastest) which has fair security.

 

[karthic1998]

can you use 9.9.9.9 (cisco dns) it is more secure than other dns

 

[tim one]

Good and detailed Linux configuration, thanks for sharing

 

[bribon77]

Nothing to add. Thanks for sharing

 

[sona]

Nice boss!

 

[DeepWeb]

Norton DNS is overkill since 99% of the malicious sites won't affect Linux users because they're focused on blocking sites with exploits for Windows. I would just use a Hosts file like Steven Black and you should be more than good.

 

[Daljeet]

Is Norton dns fast enough? Most people prefer Google dns (fastest) which has fair security.

can you use 9.9.9.9 (cisco dns) it is more secure than other dns

Good and detailed Linux configuration, thanks for sharing

Nothing to add. Thanks for sharing

Nice boss!

Norton DNS is overkill since 99% of the malicious sites won't affect Linux users because they're focused on blocking sites with exploits for Windows. I would just use a Hosts file like Steven Black and you should be more than good.

Thanks for your valuable comments and I'm sorry for late response
I'm happy you like the configuration and yes Norton DNS is pretty slow I l moved to the Quad9.
I tried many more things with my current setup.
@DeepWeb I don't know I need specific DNS for Linux or any other O.S
(Please explain)

 

[Garzaman]

I love your config, well, you just have to see my avatar,

I'd just add firejail. I only use it to listen to radio stations that force me to deactivate my adblocker.

Nice OS and secure config for me

 

[Daljeet]

I love your config, well, you just have to see my avatar,

I'd just add firejail. I only use it to listen to radio stations that force me to deactivate my adblocker.

Nice OS and secure config for me

Sure @Garzaman Testing firejail and Rootkit hunter before adding to the real machine.