[Security] Expand dangerous ports database (CouchDB, Elasticsearch, InfluxDB)

[Mossaka]

Priority

Medium

Description

The current dangerous ports list is incomplete. It's missing several common database and service ports that could be used for data exfiltration or unauthorized access.

Missing Ports

• CouchDB: 5984, 6984
• Elasticsearch: 9200, 9300
• InfluxDB: 8086, 8088

Impact

• Severity: Medium
• Attack Vector: Data exfiltration through unblocked database ports
• Risk: Unauthorized access to databases, information disclosure

Proposed Solution

Expand the dangerous ports list in the firewall configuration to include these additional database ports.

Effort Estimate

~2 hours

References

• Source: Daily Security Review Discussion [Security Review] Daily Security Review - January 16, 2026 #228
• Location: Port filtering implementation