News for hackers. Stuff that matters.

A comment on I discovered thousands of open databases on AWS. Parent comment

Re:I discovered thousands of open databases on AWS by giansegato on Monday January 31, 2022 @03:23AM (#30145756)
i'm very embarrassed to admit this, but i literally just discovered this. thought ufw was literally last defense. gotta run to fix this

(luckily, all just pet projects with no sensitive stuff - still…)

[ Parent | on HN ]
Re:I discovered thousands of open databases on AWS by diftraku on Monday January 31, 2022 @05:30AM (#30146552)
We had this issue previously and solved it with ufw by using the built-in DOCKER-USER chain that allows you to filter traffic before it hits Docker's own rules. Adding the relevant lines to UFW's before.rules means they persist across reloads.

For more on Docker's built-in chains, see: https://docs.docker.com/network/iptables/#add-iptables-polic...

[ Parent | on HN ]
Re:I discovered thousands of open databases on AWS by jeroenhd on Monday January 31, 2022 @05:17AM (#30146482)
Ha, this reminds me of the day I found out. I've port scanned my own servers ever since, just in case. It's such an easy footgun to fall for, they should really put a big scary warning somewhere on the Docker installation page for Ubuntu or something.
[ Parent | on HN ]