82
Linux Firewalls: How to Actually Secure a Cloud Server (iptables, nftables, firewalld, ufw) (blog.hofstede.it)
submitted 3 months ago by to c/linux@lemmy.world
9 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 3 months ago (3 children)

Deletes /dev/null obviously

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 3 points 3 months ago (2 children)

    For me it's clearly not obvious what exactly 'enabling firewall' entails, what policy is applied, what rules, etc., etc.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 3 months ago* (1 child)

    There are sensible defaults but it ultimately depends on what the module is doing and how you configure it.

    https://github.com/NixOS/nixpkgs/blob/8c91a71d13451abc40eb9dae8910f972f979852f/nixos/modules/services/networking/firewall.nix

    The beauty is that this, or your own custom modules, become a declarative and reproducible abstraction layer which (if properly written) lets you focus on the what rather than the how.

    ... You could also write a bunch of scripts, which is what I used to do before I joined the cult.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 3 months ago

    Nftables rulesets are reproducible and let you focus on what rather than how. I've tried nix some time ago, conceptually cool distro, but it requires a lot of time, time that can be used configuring emacs 😝.

  • permalink
  • fedilink
  • source
  • parent