保护数字海洋港口答案

【问题标题】：securing digitalocean ports保护数字海洋港口
【发布时间】：2021-03-15 09:03:45
【问题描述】：

我在 DigitalOcean 上部署了一个应用

当我运行ufw status

这是输出，

Status: active

To                         Action      From
--                         ------      ----
Nginx Full                 ALLOW       Anywhere
5432/tcp                   ALLOW       Anywhere
22/tcp                     LIMIT       Anywhere
53                         ALLOW       Anywhere
25/tcp                     ALLOW       Anywhere
587/tcp                    ALLOW       Anywhere
993/tcp                    ALLOW       Anywhere
995/tcp                    ALLOW       Anywhere
4190/tcp                   ALLOW       Anywhere
80/tcp                     ALLOW       Anywhere
443/tcp                    ALLOW       Anywhere
25                         ALLOW       Anywhere
587                        ALLOW       Anywhere
Nginx Full (v6)            ALLOW       Anywhere (v6)
5432/tcp (v6)              ALLOW       Anywhere (v6)
22/tcp (v6)                LIMIT       Anywhere (v6)
53 (v6)                    ALLOW       Anywhere (v6)
25/tcp (v6)                ALLOW       Anywhere (v6)
587/tcp (v6)               ALLOW       Anywhere (v6)
993/tcp (v6)               ALLOW       Anywhere (v6)
995/tcp (v6)               ALLOW       Anywhere (v6)
4190/tcp (v6)              ALLOW       Anywhere (v6)
80/tcp (v6)                ALLOW       Anywhere (v6)
443/tcp (v6)               ALLOW       Anywhere (v6)
25 (v6)                    ALLOW       Anywhere (v6)
587 (v6)                   ALLOW       Anywhere (v6)

我需要关闭所有额外的端口并保护我的服务器。

我该怎么办？

任何帮助都将不胜感激，因为我是托管领域的新手。

【问题讨论】：

标签： hosting digital-ocean web-hosting

【解决方案1】：

使用delete 命令删除不需要的规则

sudo ufw delete allow 25/tcp

见 Linuxize How to List and Delete UFW Firewall Rules

【讨论】：