4 ms·
Oh no I only expose ports on my tailnet. Or, I guess not then? How to check the status of the real firewall them, if ufw can mislead?
by teekert 4y ago
Oh no I only expose ports on my tailnet. Or, I guess not then? How to check the status of the real firewall them, if ufw can mislead?
- justinclift 4y agoIf you're legally allowed to run nmap against your host (eg some network places will have a real problem with it!) then it can be a useful way to check the "real world" reachability of ports.
- teekert 4y agoAfter some testing, the port really only seems to be open on the tailnet, luckily.
- berkle4455 4y agoIf you’re exposing ports on your tailnet then you’re presumably binding to those specific interfaces, right?
- teekert 4y agoNope I use ufw to only allow incoming on the tailnet [0]. Guess that I’ll ben nmapping some hosts soon… [0]: https://blog.hmrt.nl/posts/first_steps_arch_box/#set-up-tailscale-and-restict-ssh-to-the-tailnet-using-ufw https://blog.hmrt.nl/posts/first_steps_arch_box/#set-up-tail...