diff --git a/_posts/2015-06-12-ufw.md b/_posts/2015-06-12-ufw.md index 57b0bff..ae03455 100644 --- a/_posts/2015-06-12-ufw.md +++ b/_posts/2015-06-12-ufw.md @@ -48,7 +48,8 @@ ufw allow 60000:61000/udp * 5353 UDP/mdns/Avahi — used for `.local` addresses and probably not needed outside local network * 9091 TCP/transmission web interface — also something I want to access - from LAN. This seems risky too. + from LAN. This seems risky too, but risks can be limited by only + using this rule with static hosts. * Transmission file transfer uses TCP. Default port: 51413. * 17500 TCP/Dropbox LAN sync — which I use with desktops * 60000:61000 UDP/mosh — I feel this is the most insecure part of this