15
Custom Firewall (lemmy.ml)
submitted 1 year ago by to c/selfhosted@lemmy.world
11 comments fedilink hide all child comments
 

I am searching for a firewall for my self hosted services. It should be conpatible with docker, podman and native running services. I should block clients with to many fauled authentication attempts. It should also support blocklists and be as easy to configure as possible (and foss ofc). I took a short look at fail2ban, but the github docs are just lacking so much information that I was looking for (like how to configure it). CrowdSec lookes not foss enough for me.

Any recommendations? Maybe some fail2ban guide?

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 year ago (2 children)

Not exactly sure what you're looking for here; neither fail2ban nor crowdsec are firewalls by their strict definitions.

Are you looking for an IDS/IPS or other security measures? If so, what are you trying to secure?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] [S] 1 point 1 year ago (1 child)

    Inam trying to secure aelf hosted webservices against attackers. I noticed some attack attempts in my caddy logs.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 1 year ago

    Well, it wouldn't hurt anything to install fail2ban and enable the popular templates, but it sounds like you might need to explain your service layout and how it's exposed to the web before anyone can suggest a security measure.

    Generally in the self-hosted space there are two common approaches: set up a VPN into your network for your trusted devices, or set up a reverse-proxy with a trusted tunneling proxy like cloudflare.

    That you are seeing "attack attempts" in your caddy logs should be elaborated as well. What exactly are you seeing?

  • permalink
  • fedilink
  • source
  • parent