Re: [PLUG] Web Ass Pfirewall

[Robert via plug <plug@lists.phillylinux.org>]

To be honest, why are you leaving a dev server open on the internet? I 
also have a vps but I don't need anyone accessing it and if I did I 
would add their IP Address to the firewall to allow it. Simple solution 
is to block everything and only allow what needs to get in.

I use IPTABLES with IPSET for this.  If I need to add anyone I just add 
them to IPSET no need to change/add/remove rules from the firewall.  
Presently the only IP's allowed are works public IP and my home IP.


On 17/03/2021 16:29, Ron Mansolino via plug wrote:
> I have a vps that I don't do too much with, essentially a dev server.
>
> Because it sits out on the net it logs an unwieldy number of  
> intrusion attempts and nosey infogathering requests.
>
> I've been manually filtering these with iptables, but that isn't 
> scaling well (and it's impossible to block cloud services that 
> continually allocate new netblocks). I'd like to block all of AWS, 
> GCP, etc, but it's like playing whack-a-mole. I could use some 
> suggestions for a WAF that I won't eventually have to pay for.
>
> also, did the posting rules change here? I don't check here often, and 
> things aren't working as I expect them to.
>
> ___________________________________________________________________________
> Philadelphia Linux Users Group         --        http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug

--

Regards,
Robert


Smile, it increases your face value.........

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug