• kinther@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    1 year ago

    At least have a source IP access list only allowing trusted IP ranges. Ideally it would only be reached from an internal IP range or bastion host, but not all companies have a security hat to wear.

    • P03 Locke@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 year ago

      but not all companies have a security hat to wear.

      This is the barest of minimalistic security. It’s a router. You don’t allow external admin access to the router. Period. End of story.