I am going to be making the gateway OpenBSD. The gateway will have no services running on it, and serve only as a router/firewall.

An internal server will host an SSH/VPN server. There will also be an internal only mail server. All other services will be turned off.

Here are the things I'm planning on doing to secure the machines:

- Setup a tight firewall (authpf on the gateway)
- Setup AIDE/integrit
- Good permissions
- chroot jail for all services

There will also be a DMZ setup for my roommate's wireless network.

What else should I do to secure this network?