Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Right, but if you’re messing around as a naive learner it’s easy to accidentally disable that or completely open up an IP or range due to a bad rule. It’s a lot harder to accidentally enable port forwarding on a NAT.


> It’s a lot harder to accidentally enable port forwarding on a NAT.

It's probably less than three clicks on most home router web UIs.


But you have to specify not only the exposed port but also the destination address and port which is not easy to do accidentally.

edit: typo


Very hard to make all those clicks accidentally. But anyway I’m talking about pf/iptables rules, not web UIs.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: