forgive the newbie question, but I’m afraid that I have a security hole.
I have a basic config as a firewall on a single WAN.
The eth WAN get the public IP from my modem in bridge.
The public IP is retrieved in DHCP from my ISP (IPoE).
Now if i open in the browser my public IP 2.XX.XX.XX:9090 the Nethserver console web is opened ad i can access on it.
it is a behavior that I did not expect.
As a basic rule, shouldn’t all incoming ports be closed by the firewall?
My expectation was to “enable Port Forward” also for the applications installed on the host nethserver (also for nethserver web UI).
For the moment i have configured the modem “as a router” and not as a bridge to avoid this behavior.