Inspired by an earlier post, this one's for the IT workers.

Warp nACLs (network access control lists)

146 points · 13 comments · view on lemmy.world

13 Comments

SzethFriendOfNimi@lemmy.world · 23 pts · 2y (2 replies)

Kirk: We need more packets!

Scotty: I canna divert more packets. She’s gonna blow.

Spock: Perhaps we could divert the packets via a patch cable.

Scotty: Ya gotta be kiddin’ me. That’s a horrible plan.

Kirk: Do it.

Enterprise Computer: We’ve been trying to reach you about your ships extended warp bubble

Scotty: Bloody idiots, the lot of ya

AFallingAnvil@lemmy.ca · 14 pts · 2y (1 reply)

Cap'n, they're DDoSing the reactor!

SzethFriendOfNimi@lemmy.world · 4 pts · 2y

Computer: Magnetic containment fa…..

Discombobulated_Back@feddit.de · 5 pts · 2y

I like star trek, so i give this an upvote even when i dont understand it.

cypherpunks@lemmy.ml · 4 pts · 2y (1 reply)
Album@lemmy.ca · 2 pts · 2y

thanks, now i get it...

Lord_ToRA@lemmy.world · 4 pts · 2y
[ removed ]
CyberEgg@discuss.tchncs.de · 3 pts · 2y (5 replies)

Ouf. Please close port 80. And if this is not a web server, close any ports for inbound traffic and implement a spi capable firewall.

funkajunk@lemm.ee · 3 pts · 2y

Port 80 is open so you can redirect to https, it's not actually serving over http

lud@lemm.ee · 3 pts · 2y (3 replies)

It looks like these are examples from some documentation and not someone actual config

AFallingAnvil@lemmy.ca · 5 pts · 2y (1 reply)

This, I just grabbed a random example. I shudder to think of actually posting the ACLs from any production environment

ace@lemmy.ananace.dev · 1 pts · 2y

I think the file upload size limit could become a problem in my case, at least in terms of posting the complete ACLs.

We've recently managed to come down to only ~1.4k VLANs though, and the network firewall pair for our server networks now only handles ~600 SPB services.

CyberEgg@discuss.tchncs.de · 0 pts · 2y

Yea, I guess. But this should only be an example for how not to ACL

Touching_Grass@lemmy.world · 1 pts · 2y

Gonna need to see the transporter RFC