Latest / Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering
Why Your Linux Server Needs a Dedicated Bastion Host
Episode 14 of Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering. Lucas and Luna explain why routing all SSH traffic through a dedicated bastion host dramatically reduces your attack surface and simplifies compliance. They walk through a real-world setup using a $5/month VPS as a jump box, discuss sshd hardening (disabling root login, key-only auth, port knocking), and cover audit logging with auditd. The episode also details how to forward SSH agent keys securely via ssh -A, and what happens during a typical breach attempt when no bastion exists. Perfect for sysadmins…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.