Lesson 6 of 9 · 25m

What's actually listening: ip, ss, and a real firewall

Map sockets to processes with ss, dodge bind-address traps, write policy-drop nftables, and spot the Docker bypass.