[Discuss] web server can't see out but others can see in

[Rich Pieri]

On Wed, 26 Sep 2012 14:10:20 -0500
Derek Martin <invalid at pizzashack.org> wrote:

> Agreed... though if the web server is the only service that's
> listening to external connections, or all the other listening services
> are blocked off by a firewall, again there's not much difference in
> risk, with the latter being a little weaker than the former (as your
> firewall may be buggy/broken).

Meh. I'm more concerned about hosting an exposed server in a virtual
guest on the private network. Ask Google about VMware and VirtualBox
guest privilege escalation advisories. The server should be in a DMZ
where it can't be used as a proxy against the internal network.

-- 
Rich P.