确保数字海洋港口的安全

Question

我在DigitalOcean 上部署了一个应用程序

当我运行ufw status时

这是输出，

Status: active
To                         Action      From
--                         ------      ----
Nginx Full                 ALLOW       Anywhere
5432/tcp                   ALLOW       Anywhere
22/tcp                     LIMIT       Anywhere
53                         ALLOW       Anywhere
25/tcp                     ALLOW       Anywhere
587/tcp                    ALLOW       Anywhere
993/tcp                    ALLOW       Anywhere
995/tcp                    ALLOW       Anywhere
4190/tcp                   ALLOW       Anywhere
80/tcp                     ALLOW       Anywhere
443/tcp                    ALLOW       Anywhere
25                         ALLOW       Anywhere
587                        ALLOW       Anywhere
Nginx Full (v6)            ALLOW       Anywhere (v6)
5432/tcp (v6)              ALLOW       Anywhere (v6)
22/tcp (v6)                LIMIT       Anywhere (v6)
53 (v6)                    ALLOW       Anywhere (v6)
25/tcp (v6)                ALLOW       Anywhere (v6)
587/tcp (v6)               ALLOW       Anywhere (v6)
993/tcp (v6)               ALLOW       Anywhere (v6)
995/tcp (v6)               ALLOW       Anywhere (v6)
4190/tcp (v6)              ALLOW       Anywhere (v6)
80/tcp (v6)                ALLOW       Anywhere (v6)
443/tcp (v6)               ALLOW       Anywhere (v6)
25 (v6)                    ALLOW       Anywhere (v6)
587 (v6)                   ALLOW       Anywhere (v6)

我需要关闭所有额外的端口并保护我的服务器。

我该怎么办？

任何帮助都将不胜感激，因为我是一个新的主持世界。

Answer 1

使用delete命令删除不需要的规则

sudo ufw delete allow 25/tcp

请参阅Linuxize如何列出和删除UFW防火墙规则