Is it safe to open all Outbound Ports?

[heybuddy]

Hi,

I am wondering how safe to open all outbound ports in CSF Firewall? For both IPv4 and IPv6 and TCP-UDP.

I am thinking that filtering inbound ports is needed but not for outbound ports?

What is your thoughts on this?

 

[Ohm J]

not safe, Your user can abused some port to attack other.

 

[Richard G]

Agree with Jamgames2. We had some hacker which posted via a leak script a mail server on a different port to spam. However that didn't work as that port was closed. It's just best to only open what is needed for most safety.
Next to that, csf opens automatically the correct ports. So if you need extra ports it's little work.

 

[heybuddy]

Agree with Jamgames2. We had some hacker which posted via a leak script a mail server on a different port to spam. However that didn't work as that port was closed. It's just best to only open what is needed for most safety.
Next to that, csf opens automatically the correct ports. So if you need extra ports it's little work.

Hi,

Make sense.

Any suggestion how to know which port should I open for outbound connection?

I'm installing other software beside DirectAdmin like Docker and some VPN software.

 

[Richard G]

Any suggestion how to know which port should I open for outbound connection?

That really depends on what you want to do. When DA installs CSF/LFD or you use the ./install_directadmin.sh from the csf installation to install it yourself, it will put most needed ports open.

VPN software, don't know for what. Web traffic is port 80 which normally already is open.

For Docker, I don't know if you even need outgoing ports on only incoming. Maybe somebody using Docker can answer that.

 

[heybuddy]

That really depends on what you want to do. When DA installs CSF/LFD or you use the ./install_directadmin.sh from the csf installation to install it yourself, it will put most needed ports open.

VPN software, don't know for what. Web traffic is port 80 which normally already is open.

For Docker, I don't know if you even need outgoing ports on only incoming. Maybe somebody using Docker can answer that.

Hi Richard,

Got it.

Thanks for your answer.