Skip to main content

Firewall

Allow:

  • TCP 9333 from the internet if you want inbound peers
  • SSH from your administration addresses only
  • TCP 80/443 only if this host also serves HTTPS

Deny public access to 9332. Production RPC is loopback plus a TLS proxy.