Warp nACLs (network access control lists)

  • CyberEgg@discuss.tchncs.de
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    8 months ago

    Ouf. Please close port 80. And if this is not a web server, close any ports for inbound traffic and implement a spi capable firewall.

    • lud@lemm.ee
      link
      fedilink
      arrow-up
      4
      ·
      8 months ago

      It looks like these are examples from some documentation and not someone actual config

      • AFallingAnvil@lemmy.caOP
        link
        fedilink
        arrow-up
        6
        ·
        8 months ago

        This, I just grabbed a random example. I shudder to think of actually posting the ACLs from any production environment

        • Ananace@lemmy.ananace.dev
          link
          fedilink
          arrow-up
          1
          ·
          8 months ago

          I think the file upload size limit could become a problem in my case, at least in terms of posting the complete ACLs.

          We’ve recently managed to come down to only ~1.4k VLANs though, and the network firewall pair for our server networks now only handles ~600 SPB services.

    • funkajunk@lemm.ee
      link
      fedilink
      English
      arrow-up
      3
      ·
      8 months ago

      Port 80 is open so you can redirect to https, it’s not actually serving over http