Skip to content

[Enhancement] Firewall (UFW) #8

@MalteKiefer

Description

@MalteKiefer

Enhancement

There should be the possibility to activate and manage a firewall in the CP.

It offers itself here to use UFW.
For Python there is a small wrapper: https://pypi.org/project/pyufw/ with it the administration of the firewall is very simple.

Procedure

  • When activating check if UFW is installed, if not install it.
  • Automatically set the rules for SSH, FastCP, HTTP and HTTPS:
ufw.add("allow 22")
ufw.add("allow 80")
ufw.add("allow 443")
ufw.add("allow 2050")

These rules should be the default.
In addition, you should be able to add or delete more rules.
This should be kept very simple in the style of FastCP, meaning that only the services are displayed.
Something like:

Allow Service: SMTP
Allow Service: SMTPS
Allow Service: IMAP
Allow Service: IMAPS
Allow Service: DNS

When a rule is set, you change the button from Allow to Block.
You should see all rules that are active, and you should be able to delete them.

Version 2

In the further course there should be an expert view, which allows creating more exact rules, e.g.: blocking of IP's and the like.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions