166
Linux Firewalls: How to Actually Secure a Cloud Server (iptables, nftables, firewalld, ufw) (blog.hofstede.it)
submitted 3 months ago by to c/technology@lemmy.world
19 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 22 points 3 months ago (1 child)

Sure, but what if youve configured your waf or w/e incorrectly, what if someone gains access to another part of your network? Having sane firewall settings is always better than none at all.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 3 months ago

    All the cloud services I've used had virtual network firewalls for internal traffic. Security Groups for AWS, Cloud Firewall for GCP, etc. That's typically how lateral traffic gets managed. Defense in depth is good, but as I said I haven't used host firewalls in forever, and we get audited for security certificates every year, and no auditor has asked about them that I recall.

  • permalink
  • fedilink
  • source
  • parent