On: Rack Attack: Protection from abusive clients

[fduran]

Agree, I also block all unused incoming ports as a safety net as you say.

[oinksoft → fduran]

Probably easier to just use a whitelist policy, no?

[fduran → oinksoft]

Of course; implementation of the idea is whitelist: allow used ports default policy deny all