Menu

#52 limit attack surface

3.2
closed
nobody
None
1
2017-09-04
2016-05-06
No

Remove remotely reachable ports. For example, currently TCP port 8080 (Java web server) is listening on all interfaces. Why?

Discussion

  • Steve Pinkham

    Steve Pinkham - 2017-09-01
    • status: open --> closed
     
  • Steve Pinkham

    Steve Pinkham - 2017-09-01

    Added ufw firewall rules to limit access to localhost for all services.
    Other layers: Some services still listen on localhost only, and we still ship a VM with NAT by default.

     
MongoDB Logo MongoDB