App specific firewall configuration

[nebulon]

Ability to add an ACL list to certain apps, use case would be to restrict apps to either a ASN, or IP Network.

This would sit above the Application - at the moment such controls cannot be done before hitting the application / on the vps because it would revoke access to other apps.

Work around would need to be done inside the app, which can cause higher degree of error.

[girish]

Related: https://forum.cloudron.io/topic/3795/firewall-spamassassin-automatic-list-update

[mehdi]

My 2 cents about this: it would be great to be able to do this but only for a specific port of a certain app. Like, keeping the web interface accessible for all, but limit access for a given tcpPort.

Bonus points if limiting access to clients accessing from openVPN server is automated