>But then you have to ask: why is your admin interface available on routable IPs to begin with? You have railed against network isolation as defense in other t

>But then you have to ask: why is your admin interface available on routable IPs to begin with? You have railed against network isolation as defense in other threads. Locally-scoped IPs, VPNs, and ACLs are all about network isolation. Care to shed some light on the inconsistency?