DO's Firewalls

[omega]

Digitalocean offer firewall management. I am not sure how this compares to onboard, and feedback on it would be great, however, what are the basic recommendations for setup or best practices other nodeBb admins suggest?

Inbound, set to ALL IPv4/v6, TCP

SSH
HTTP
HTTPS

Outbound - Same again or more or less?

What kind of settings do other users find works and what other tips for securing the nodeBB server do others also employ.

[Sandeep Bhuiya]

you just need to open this ports :

ssh port in/out better to disable root/user login with pass instead use the key

Http protocol ( it is recommended to not use nodebb port publicly ) in/out:

80
443

Email if you're using SMTP in/out:

25
465

[scottalanmiller]

@omega said in DO's Firewalls:

Digitalocean offer firewall management. I am not sure how this compares to onboard,

It's an additional protection, not an alternative protection. DO's firewall is the same as any normal LAN edge firewall.