diff --git a/This-guide-should-help-new-users-to-secure-%22harden%22-their-Oxen-Service-Node..md b/This-guide-should-help-new-users-to-secure-%22harden%22-their-Oxen-Service-Node..md index 527b087..22ca74c 100644 --- a/This-guide-should-help-new-users-to-secure-%22harden%22-their-Oxen-Service-Node..md +++ b/This-guide-should-help-new-users-to-secure-%22harden%22-their-Oxen-Service-Node..md @@ -196,22 +196,18 @@ As long as you are using the standard ports. This port rules are defined in `/et Further explanations: Inbound traffic should allow following ports: -**1090/udp** for the **lokinet-router** -**22022/tcp** for **oxend** p2p -**22025/tcp** for ** quorum/blink** communication -**22021/tcp** for **storage server**: for remote clients to talk to service node -**22020/tcp** for **storage server**: service nodes talking to other service nodes. +* 1090/udp for the lokinet-router +* 22022/tcp for oxend p2p +* 22025/tcp for quorum/blink communication +* 22021/tcp for storage server: for remote clients to talk to service node +* 22020/tcp for storage server: service nodes talking to other service nodes. Outgoing traffic should be allowed for all ports. If you want to run a testnet node, following ports should be open for inbound traffic: -ports 38156, 38159/tcp for oxen-daemon -ports 38154, 38155/tcp for oxen-storage-server +* ports 38156, 38159/tcp for oxen-daemon +* ports 38154, 38155/tcp for oxen-storage-server -Verify and double-check that UFW is working properly and all ports are set correctly: -``` -sudo ufw status -``` Optionally, if you do not need *ipv6* connection you can delete this rules by modifying the general UFW settings. @@ -232,6 +228,10 @@ To make the changes effective you need to restart the UFW by entering: sudo ufw reload ``` +**Verify and double-check that UFW is working properly and all ports are set correctly**: +``` +sudo ufw status +``` ## 3.1 Firewall - Switch SSH port