5 ms·
Very security engineer minded approach. I block every port for VPS, then open one by one. Same approach here with files. The only downside I see here is, kn
by yipinwong 11d ago
Very security engineer minded approach.
I block every port for VPS, then open one by one.
Same approach here with files.
The only downside I see here is, knowing which one to allow. For ports, it's easy, but files can have many different extensions.
Apps/CLIs, etc create files with extensions you never encountered before, which can cause issues.
Other than that, I like the apporach
- der_gopher 11d agoI like the analogy with ports, I also do the same - ufw deny all :)
- JackSlateur 10d agoPort numbers are convention A "security engineer minded approach" would be: own what is executed on the box;