2 ms·
When working with default deny firewall rulesets, inbound port by PID is an essential rule mechanism.
by egberts1 3y ago
When working with default deny firewall rulesets, inbound port by PID is an essential rule mechanism.
- noisy_boy 3y agoI still don't get it - how do you define rules by PID and make it work after the next reboot? Won't the PID change for the process in question? I assume by PID we are talking about the same Process ID that we can see in "ps"
- egberts1 3y agoIt may not be obvious but one (lesser) application is to block all ports to PID 1 ... for logging purpose. Most of this kind of firewall rule get created after such executable starts ... by a dedicated firewall daemon monitoring the operating system's PID state (creation/deletion/child).