I actually started there, but it only raised more questions, and doesn't really answer my question. I understand about disabling services that aren't needed, but for the services that ARE needed there isn't much about securing them further via host firewall rules, nor is there much information about what exactly some of them even are or do. (I'm just supposed to allow "All" inbound traffic for some of these? That doesn't seem wise.)
↧