3 ms·

> Any port you map on the host will be opened in nftables ... That rates a "Wow!" but seems like something more important to Enterprise/Cloud. It seems like it

> Any port you map on the host will be opened in nftables ... That rates a "Wow!" but seems like something more important to Enterprise/Cloud. It seems like it would be a Bad Thing to open a port because a DB server ran in a different container. That's not something that should be opened unless the DB is on a different host (VM) from an application that uses the DB. In my case I have a firewall/router protecting my home LAN and don't generally run firewalls on individual hosts.

worksonmine 2y ago
Any website you visit on your home network could do a portscan on the local network and figure out what you're hosting. Hackers are creative. Chrome has some mitigations against this but unfortunately not Firefox last time I checked. Do you have any IoT devices? Smart TV? It's always a good idea to lock down everything you can and avoid unsafe defaults. If podman causes any friction there's most likely a good reason behind it. For me there are none and I've lost count of the containers I'm running.