App specific firewall configuration

[nebulon]

Ability to add an ACL list to certain apps, use case would be to restrict apps to either a ASN, or IP Network.

This would sit above the Application - at the moment such controls cannot be done before hitting the application / on the vps because it would revoke access to other apps.

Work around would need to be done inside the app, which can cause higher degree of error.

[girish]

Related: https://forum.cloudron.io/topic/3795/firewall-spamassassin-automatic-list-update

[mehdi]

My 2 cents about this: it would be great to be able to do this but only for a specific port of a certain app. Like, keeping the web interface accessible for all, but limit access for a given tcpPort.

Bonus points if limiting access to clients accessing from openVPN server is automated

[potemkin_ai]

@mehdi my thoughts / use case exactly.

Doing so with ipchains is a pain (thanks Docker's intervention to firewall); and ufw just doesn't handle all of the use cases (thanks Docker again).