3 ms·
Isn’t putting these interfaces behind ssh port forwarding the way to prevent any issues? Why would these be open to the internet?
by e40 3y ago
Isn’t putting these interfaces behind ssh port forwarding the way to prevent any issues? Why would these be open to the internet?
- kjs3 3y agoYou're correct, they shouldn't be. All BMCs, iDRACs and other OOB management endpoints should be on segregated networks with access control. Basic network hygiene. Unfortunately, there are enough who think this is 'inconvenient' (someone literally told me this yesterday) or simply don't know they should, so you find them exposed all over the place.