[TriLUG] Distro recommendation for secure hosting

[Alan Porter]

In defense of the "distro is not the problem" argument, I have had
very good results with Ubuntu on my personal web servers, business
servers and on TriLUG's servers.

I do limit the services that run, I hide questionable services (like
RoundCube) behind HTTP auth, I run shorewall (iptables firewall),  I
use keys-only SSH, and I run denyhosts or fail2ban.

Alan