On Mon, May 30, 2022 at 09:03 IL Ka <kazakevichilya@gmail.com> wrote:IMHO: It is better to have a firewall and block (policy -- drop) INPUT and FORWARD by default.And open only ports that must be opened.This will help if you install some software that listens for 0.0.0.0 by accidentFrom my limited research, that seems to be the prevailing view.-Tom