Find me on Mastodon too.

  • 3 Posts
  • 9 Comments
Joined 1 year ago
cake
Cake day: January 26th, 2024

help-circle







  • Create service groups and host groups, then assign the appropriate host groups the proper service(s).

    So if you have a web server only, it gets the webserver host group containing http and https tcp ports.

    But if you have an application that uses web ports plus another port, just add the appropriate service group.

    Essentially, think additive permissions: start restrictive, then add ports/service groups as necessary.

    I hope that makes sense.