Unverified50% confidenceSolutionExact time
In whitelist mode, an egress firewall denies all outbound connections by default, only allowing traffic that matches predefined rules (destination IP/CIDR, port, protocol, domain name).
1
Sources
50%
Confidence
Long-term
Relevance
9/8/2026
First Seen
Sources
Related Entities
Related Claims
Unverified生产环境中建议配置防火墙规则，仅放行来自 Dify 服务器 IP 对 11434 端口的入站流量70% similarUnverifiedThe core idea of default-deny egress is to block all outbound connections unless explicitly permitted, which is the opposite of traditional firewalls that allow outbound traffic by default, and is a key practice in zero-trust network architecture66% similarUnverified在局域网中开放 Web 服务时，建议配置 HTTP Basic Auth 认证或 IP 白名单限制以防止未授权访问64% similarUnverifiedTraditional firewalls operate at layer 3 (the network layer) and layer 4 (the transport layer) of the OSI model and can only filter based on IP addresses and port numbers.61% similarUnverifiedRouterOS 防火墙规则按顺序匹配，第一条命中的规则决定数据包命运，插入位置由 place-before 参数控制58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/878828API
curl https://kongchang.com/api/v1/knowledge/claims/878828MCP
get_claim(id=878828)