We have the following configuration of the
/etc/network/interfaces file which was setup by somebody else on this system. It has worked well by allowing other systems on LAN (and the internet) to connect to an
nginx/apache run server on that IP regardless of interface they are connecting through (i.e.
auto lo iface lo inet loopback post-up /sbin/ip addr add 192.168.1.200/32 dev lo
The firewall has port forwarding to this IP (192.168.1.200) for ports 40 and 443.
The servers is on the small office LAN which handles sensitive data and a couple of workstations. Our key risks are:
- Motivated hacker compromising sensitive data stored on a separate Samba server on the same LAN;
- Ransomware attacks.
QUESTION: is this IP binding would be less safe in comparison to using a regular static IP address assignment to a single adapter (rather than to localhost), or they are indistinguishable? Any other advice regarding the use of this approach - bad/good/neutral?