I'm using Hetzner for a server which only needs 80/443 and 22 accessible to the outside world. When I use the Hetzner firewall template, it also adds:
- protocol icmp, which I think is for ping
- ports 32768-65535 are open with a tcp flag of 'ack'
AWS seems to close down everything, including ping.
- Is there any reason to have ports 32768-65535 open and what does 'ack' mean ?
- Should protocol icmp be disallowed?
The Nginx server is running https and 80 is redirected to 443. Is it best practice to leave 80 open and redirecting to 443, in case traffic comes in on 80, or should 80 also be closed?