Hey Hey,

I'm going to disagree with WebCarnage....

I don't think you need grsec... I don't think any daily usage, surf the net machine needs grsec... If you want to play with it sure... but it's not necessary... I also don't think an iptables script is needed... If you're behind a NAT device (home router) then the script is useless... secondly you don't want to rely on a firewall to protect you.... What you should do is determine what services you'll require (Do you want a web server, or ssh, or postfix (which generally runs by default on Ubuntu)..if you don't want it... disable it from starting)...

Besides disabling unnecessary services and installing the updates, out of the box you're generally pretty good to go....

Another option if say you do want SSH or a WebServer and want to limit access... rather than relying on iptables... I prefer hosts.allow and hosts.deny... You should be able to find decent howtos on the net to walk you through them.

Peace
HT