So I have thought a bit about hardening a Debian squeeze file & VPN server
Right now, we've placed the machine behind a firewall only allowing SSH connections from LAN, set a strong
root password and installed
unattended-upgrades to keep us fresh on those security fixes.
What more should we do?