Remote, periodically updated network blocking lists

[necrevistonnezr]

Currently we have a static network blocking list, to be filled manually (and in stages, depending on the size of the list): https://docs.cloudron.io/networking/#blocklist

Using the blocklist configuration, one or more IP addresses and/or networks can be blocked from connecting to Cloudron.

There are several providers who provide regularly updated lists of malicious actors, e.g. https://www.blocklist.de/en/export.html

Maybe Cloudron could ingest and update such lists automatically?

[girish]

@necrevistonnezr I like this idea. In fact, I use this exact feature in my synology router.

[necrevistonnezr]

@girish Should I open an issue for box on git?

[girish]

@necrevistonnezr think it's fine here. We use the git issue tracker to track developer tasks mostly.

[necrevistonnezr]

Is that still being considered...?
(in connection with https://forum.cloudron.io/topic/9318/further-locking-down-email/)

[girish]

Let's see what we can do for 7.6

[MisterJD]

Currently I'm also fighting with a lot of brute force attacks on the mail server and the sftp. And regularly update the IP blacklists. A feature that would automatically refer to and apply such lists would be a really great thing.

[robi]

@MisterJD see https://forum.cloudron.io/post/40906 and https://www.simplified.guide/ssh/auto-block-failed-attempts