Zero-Day Exploitation of Atlassian Confluence

Re:Zero-Day Exploitation of Atlassian Confluence by latchkey on Friday June 03, 2022 @01:30AM (#31604625)

Nailed it.

Let's also admit that setting up iptables is harder than it needs to be. I mean, not after the first twenty times... you eventually remember all the arcane logic and expect everyone else to as well.

[ Parent | on HN ]

Re:Zero-Day Exploitation of Atlassian Confluence by bogantech on Friday June 03, 2022 @02:24AM (#31604909)

If you're manually editing iptables rules in production in current year you're doing it wrong anyway, you should have some form of config management like ansible/salt/puppet etc that make it dead simple to add rules or at the very least just use firewalld or something

[ Parent | on HN ]

Re:Zero-Day Exploitation of Atlassian Confluence by heurisko on Friday June 03, 2022 @05:18AM (#31605996)

In the past, I've found making tomcat listen on unprivileged 8080 and proxying it using nginx on 443 works well.

[ Parent | on HN ]