0

I inherited a server from another dev that left. And the hosting is telling me to remove all these firewall rules, because these can cause security problems. Not sure if I'm understanding this correctly, but wouldn't removing all these rules also block users trying to access the websites on the server and even email access?

access-list 101 extended permit icmp any any object-group ICMP-ALLOWED

access-list 101 extended permit tcp any any eq https

access-list 101 extended permit tcp any any eq www

access-list 101 extended permit tcp any any eq domain

access-list 101 extended permit udp any any eq domain

access-list 101 extended permit tcp any any eq smtp

access-list 101 extended permit tcp any any eq pop3

access-list 101 extended permit tcp any any eq imap4

access-list 101 extended permit tcp any any eq 3306

access-list 101 extended permit tcp any host xxx.xxx.xxx.xxx eq ssh
1
  • You may also look at the use of the access-list : input or output. If it is output, you just allow the server to connect to all mail, web, DNS servers on Internet... If Input, it means that you are serving all the protocols from your server. You may restrict them if needed (and possible), if you can – Dom Jun 16 at 5:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.