teusink/Home-Security-by-Pi

Issues

• Add support for private DNS with DNS-over-TLS (port 853)

  #4 opened 2 years ago by teusink
  5

• Add IPv6 support for OpenVPN (PiVPN) on Pi

  #12 opened 2 years ago by teusink
  5

• Look into using NTS as a secure alternative to NTP

  #42 opened 2 years ago by teusink
  1

• links not working

  #44 opened 2 years ago by Warmax356
  1

• Look into OTP for OpenVPN

  #21 opened 5 years ago by teusink
  1

• Look into OTP for SSH

  #39 opened 5 years ago by teusink
  1

• Look into enabling TCP for OpenVPN

  #40 opened 5 years ago by teusink
  1

• Add explicit no compression in VPN

  #43 opened 5 years ago by teusink
  1

• -

  #38 opened 6 years ago by teusink
  0

• No fail2ban 0.10 release on Pi leads to no protection on IPv6

  #26 opened 7 years ago by teusink
  4

• Documentation Improvements

  #33 opened 6 years ago by thexmanxyz
  34

• Add support for private DNS with DNS-over-HTTPS (port 443/5053)

  #37 opened 6 years ago by teusink
  1

• Validate if upgrade to Pi-hole requires changes to guide

  #36 opened 6 years ago by teusink
  1

• Move changes of conf files out of original files

  #35 opened 6 years ago by teusink
  1

• Look into Certificates for Pi

  #13 opened 7 years ago by teusink
  1

• Look into preventing DNS reflection attack

  #3 opened 7 years ago by teusink
  5

• Validate CIS Benchmark for Debian against Pi for more hardening

  #32 opened 7 years ago by teusink
  1

• Blocking ssl.google-analytics.com really slows down some page loading

  #19 opened 7 years ago by teusink
  1

• VNC server runs on IPv4 only (IPv6 can be enabled)

  #34 opened 7 years ago by teusink
  2

• Look into Webmin administration tool

  #18 opened 7 years ago by teusink
  2

• Execute VPN IP/DNS-leak test

  #9 opened 7 years ago by teusink
  1

• Execute DNSSEC resolver tests

  #7 opened 7 years ago by teusink
  2

• Look into an internal DNS-server capability

  #14 opened 7 years ago by teusink
  1

• Add instructions removing Pi games and apps

  #6 opened 7 years ago by teusink
  1

• Implement fail2ban to block to many failed login attempts

  #2 opened 7 years ago by teusink
  1

• Add/improve use of iptables

  #1 opened 7 years ago by teusink
  1

• Further harden Raspberry Pi?

  #5 opened 7 years ago by teusink
  1

• Execute Nessus Security Tests

  #8 opened 7 years ago by teusink
  2

• Look into ClamAV as anti-malware

  #10 opened 7 years ago by teusink
  1

• Look into RootKithunter

  #11 opened 7 years ago by teusink
  1

• Limit the FORWARD for VPN in iptables more than now?

  #17 opened 7 years ago by teusink
  1

• Look into Raspberry Pi Security tips

  #22 opened 7 years ago by teusink
  1

• Look into Logwatch

  #25 opened 7 years ago by teusink
  1

• Look into Tripwire

  #24 opened 7 years ago by teusink
  1

• Check to incorporate weekly audits after update

  #31 opened 7 years ago by teusink
  1

• Security Audit: debsecan Security Vulnerabilities tool

  #28 opened 7 years ago by teusink
  2

• Security Audit: Lynis Auditing tool

  #23 opened 7 years ago by teusink
  2

• Lynis - Look into improving file-system partitioning & usage (such as USB)

  #27 opened 7 years ago by teusink
  3

• Cron mails error to wrong address

  #30 opened 7 years ago by teusink
  1

• ClamAV is a memory-hungry-service, killing the trade-off with Security vs Performance

  #29 opened 7 years ago by teusink
  1

• Scans by ClamScan en RkHunter slowing down Pi

  #20 opened 7 years ago by teusink
  1

• Create backup SD-card procedure

  #16 opened 7 years ago by teusink
  1

• Moving from Jessie to Stretch broke some stuff in the guide, needs fixing

  #15 opened 7 years ago by teusink
  1