2 ms·

I host several customer projects on Hetzner managed servers. Ports of all the services, MySQL, Postgres, smtp, everything else are open to the world and their s

by DCoder 13y ago

I host several customer projects on Hetzner managed servers. Ports of all the services, MySQL, Postgres, smtp, everything else are open to the world and their support refuses to lock that down in any way. I accept that for managed servers they need to connect from outside to manage them, but how hard would it be to drop all traffic except for the IP range their management systems use?

kbar13 13y ago
l2software firewall
- DCoder 13y ago
  I'm talking about a managed server. No root access. If there was root access, I wouldn't be listening to their "we can't limit access because that's how our management tools work".