> I don't see how you'd be owned if you're denying all outside traffic, but stranger things have happened. My thought was the same but yup you never know. From

> I don't see how you'd be owned if you're denying all outside traffic, but stranger things have happened. My thought was the same but yup you never know. From the outside my attack surface is very low, just a couple port forwards to a VPN/SSH server. It’s the non-obvious exploits that worry me (overflow in packet header parsing or borderline magic like that), but perhaps I’ve been watching too many movies :) I will make sure my config is as solid as I can reasonably make it before connecting it to the world, I guess outside of that there’s not a whole lot I can do anyway.