• Semperverus@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    2 years ago

    You basically need to employ network engineering level security - very tight firewall rules, use NAT where it’s available (IPv6 removes NAT, which ipv6 apologists will tell you is a good thing - they’re wrong, as it removes per-service level control)