. . . "There is no such thing as a configuration that will completely prevent your system from getting hit by Internet attacks, especially if you are being targeted by a nation-state or other such adversary with significant resources on hand." .