Lab lesson · free
Learn server hardening – step by step
A freshly set-up server is an open invitation. Hardening means systematically shrinking the attack surface. Here you go through the most important steps – and run them on a real, own VM without being able to break anything real.
Updates and minimal services
The first step is always: keep the system up to date and switch off everything you don't need. Every running service is a potential door. Less is literally safer here.
Firewall with UFW
With ufw you allow only the ports that are truly needed (e.g. SSH and HTTPS) and block the rest. A correctly configured firewall is one of the most effective single measures.
Securing SSH & fail2ban
Password login off, root login off, plus fail2ban against brute force: this practically closes the most common attack path – guessing SSH credentials.
What you practise
Get in Touch
Have a project?
Let's bring your idea to life together. We're happy to advise you with no obligation.
Get in Touch →