@vkc It's also as good a reason as any to remind folk...

@vkc
It's also as good a reason as any to remind folk learn about UFW (or FirewallD or what else ones distro may provide).

It's one of the first steps before I start adding users or packages to a newly provisioned server.

And with Wireguard or similar (if suitable) one can have SSH limited to only the local subnet and/or tunnel networks.

Like 1 July at 14:36 | Wall-to-wall | Open on hostux.social

2 comments

Veronica Explains

@prlzx I have a ufw script written for a future video and I'm kicking myself for not having worked on that video last week!

1 July at 14:39 | Open on linuxmom.net

Paul L

@vkc
Looking forward to that :)
I find the App profile feature invaluable when adding services (whether they provide a profile or the ease of making custom ones).

I do wish there was an easy way to store named arrays of addresses, network prefixes and ports/ranges that UFW could use in rules (common to many firewall distributions like vyos and pfSense).

1 July at 14:47 | Open on hostux.social

Go Up