4 ms·
If it's not some sort of proxy/firewall remapping the port, you probably shouldn't use a port above 1000 for some services. Consider this: an attacker (somehow
by sureglymop 3y ago
If it's not some sort of proxy/firewall remapping the port, you probably shouldn't use a port above 1000 for some services.
Consider this: an attacker (somehow) managed to get user access to your server. They can now dos the service until it crashes and then start their own service listening on that same port, maybe impersonating your service. Maybe they can use that to grab sensitive information or do something else.
- pepa65 3y agoIf that is your worry, use net.ipv4.ip_local_reserved_ports
- bshipp 3y agoIndeed, although because I heavily utilized Docker I also ended up using UFW-Docker. It was fairly straightforward to incorporate into my startup scripts. https://github.com/chaifeng/ufw-docker https://github.com/chaifeng/ufw-docker