Warp nACLs (network access control lists)
this post was submitted on 22 Oct 2023
149 points (97.5% liked)
Memes
45661 readers
1993 users here now
Rules:
- Be civil and nice.
- Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Ouf. Please close port 80. And if this is not a web server, close any ports for inbound traffic and implement a spi capable firewall.
It looks like these are examples from some documentation and not someone actual config
This, I just grabbed a random example. I shudder to think of actually posting the ACLs from any production environment
I think the file upload size limit could become a problem in my case, at least in terms of posting the complete ACLs.
We've recently managed to come down to only ~1.4k VLANs though, and the network firewall pair for our server networks now only handles ~600 SPB services.
Yea, I guess. But this should only be an example for how not to ACL
Port 80 is open so you can redirect to https, it's not actually serving over http