diff --git a/debian/changelog b/debian/changelog
index fc43271..2c88127 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+dns-flood-detector (1.20-1) unstable; urgency=low
+
+  * New upstream release
+  * Enable Hardening
+    - build-dep on hardening-wrapper
+
+ -- Jan Wagner <waja@cyconet.org>  Wed, 22 May 2013 13:40:57 +0200
+
 dns-flood-detector (1.12-7) unstable; urgency=low
 
   * Add trailing trunk/ at Vcs-Svn-field
diff --git a/debian/control b/debian/control
index 93f9e6e..866d7c7 100644
--- a/debian/control
+++ b/debian/control
@@ -2,7 +2,7 @@ Source: dns-flood-detector
 Section: net
 Priority: optional
 Maintainer: Jan Wagner <waja@cyconet.org>
-Build-Depends: debhelper (>= 9), libpcap0.8-dev
+Build-Depends: debhelper (>= 9), libpcap0.8-dev, hardening-wrapper
 Homepage: http://www.adotout.com/
 Vcs-Browser: https://scm.uncompleted.org/projects/debian/repository/show/dns-flood-detector
 Vcs-Svn: https://scm.uncompleted.org/svn/debian/dns-flood-detector/trunk
diff --git a/debian/rules b/debian/rules
index 44b8cd0..ef9265c 100755
--- a/debian/rules
+++ b/debian/rules
@@ -4,6 +4,10 @@
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
 
+# hardening
+export DEB_BUILD_HARDENING=1
+CFLAGS:=$(shell dpkg-buildflags --get CFLAGS)
+
 CFLAGS += -D_BSD_SOURCE -Wall -g
 LDLIBS += -lpcap -lpthread -lm