Quoting Hendrik Boom (hendrik@???):

> IPMI is presuably the same protocol described as "The most dangerous
> protocol you've never heard of"?
>
> http://www.itworld.com/article/2708437/security/ipmi--the-most-dangerous-protocol-you-ve-never-heard-of.html>

For that reason, IPMI ports need to be at _least_ confined by VLAN
tagging to a special service network with no direct public access
whatsoever, if not physically separate. Have mandatory VPN access
controls to get to that network, and watch it like a hawk. Never, ever
let those ports be public-facing.