Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

i'm wondering if i can create a Security Group that limits access of internal network , as i know all ports are open for internal network and i wanna limit it

share|improve this question

1 Answer 1

EC2 security groups only affect incoming communications and do not prevent a server from initiating outbound communications.

The only exception on this rule are Amazon Virtual Private Cloud (VPC) security groups. So if you want to do this you will have to set up your servers in a VPC.

You could always set your firewall to drop all outbound packets (make sure you allow ssh/rdp) on OS level, using the Windows Firewall or iptables in Linux.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.