Honestly there are piles of vectors for this kind of situation. If a server is directly connected to the internet with no true firewall between it and the rest of the world, then it’s impossible to be certain of it’s security.
You do not understand. If they can flood your pipe with infinite requests you are doomed, “dropping in firewall” does nothing at all for that scenario. Once your IP is exposed the game is over.
3 Likes