OaksLabs Security Configuration

[OaksLabs]

I run an Untangle universal threat management device as my router, and I have the following "apps" enabled:

• Virus Blocker Lite
• Spam Blocker Lite
• Phish Blocker
• Ad Blocker
• Intrusion Prevention
• Firewall
• Reports
• OpenVPN

The firewall is stateless, blocking all incoming AND outgoing connections except for ports: 80, 443, 53, 123, 20, 21, 25, and 82. (None of my web/mail/ftp servers are running on this PC!)

The details of all the Untangle apps can be found here: User Guide - UntangleWiki

I do whole disk image backups on a nightly basis, and the backups are encrypted and are stored on my NAS (running a RAID-Z configuration via NAS4Free).

 

[Noxx]

Solid configuration and have nothing to add. Thanks for sharing.

 

[jamescv7]

I can see the setup to be efficient and well covered.

Knew that you are a highly experience user and the risk label to you goes on the password-protected user account problem; which is proper procedure no matter if you are not been suffer to any stealing or compromise access.

 

[OaksLabs]

Intellectual question about user passwords: What would I gain above and beyond what the 25+ character boot authentication password with a user account password? I don't use one because at work I remove them regularly for customers who forget them, and I can only see a user account password being useful for preventing a physical person from accessing the PC, but my full disk encryption already protects against this (so long as the PC is off and I don't leave it running while I'm gone).

 

[Exterminator]

Looks good! Thanks for sharing your config

 

[DJ Panda]

Add Malwarebytes Anti Exploit and a password then your good to go.