Have been using WireGuard since 2 Years now it is really fast, it would be great to see it in Cloudron maybe with PiHole.

Hi,
i just wannted to ask about the Firewall in Cloudron Whitelist and Blocklisting IP's.
Usually i would do it over UFW but since its a bit diffrent in Cloudron.
Because i see some IP's thanks to shodan -.- trying to send some spams and i would like to block them.
And GEO IP Blocking as a feature would be nice, i think login to my.cloudron.com should be really high secured, i mean yes we have 2FA but if someone tries bruteforce attacks will not lead to something because of 2FA, but why create uneeded webservice requests.

looking really forward for PI-Hole and Wireguard really

@Mallewax i think this would lead also to new people using cloudron

yeah i mean it would be for me i would never create pihole acessable for others its for private reasons vpn+pihole. So pihole would be listening, lets say on 10.9.0.0

Maybe in the future the idea could to configure other apps only availaie in the same VPN Network

Hi thanks for the Information any news or goals regarding firewall and security of Cloudron IP-Blocking or Fail2Ban maybe?

thank youuuuu

Looks like it depends on the server ressources maybe.

First i Importet

https://www.ipdeny.com/ipblocks/

RUSSIAN FEDERATION (RU) [download ru.zone] Size: 170 KB (10497 IP blocks)

And after Importing

CHINA (CN) [download cn.zone] Size: 136 KB (8444 IP blocks)

The issues startet

Hi,
was happy about the new Firewall Feature so i started Blocking by Countrys.
Blocked China and Russia IPs.
So then at a Point i get the message Response timeout.
Now i am not abel to Delete any IP or add new IP. I always get the Response timeout.

So i checked the box.log it tells me the IP's are duplicated
Box POST /api/v1/network/blocklist 500 Internal Server Error Response timeout 20001.781 ms - 72
2020-09-12T07:43:00.057Z box:shell setBlocklist (stdout): ipset v6.34: Element cannot be added to the set: it's already added

2020-09-12T07:43:00.060Z box:shell setBlocklist code: 1, signal: null
ERROR HttpError: Error setting blocklist: setBlocklist exited with code 1 signal null
at Function.BoxError.toHttpError (/home/yellowtent/box/src/boxerror.js:97:16)
at /home/yellowtent/box/src/routes/network.js:29:41
at /home/yellowtent/box/src/network.js:45:27
at f (/home/yellowtent/box/node_modules/once/once.js:25:25)
at ChildProcess.<anonymous> (/home/yellowtent/box/src/shell.js:69:9)
at ChildProcess.emit (events.js:198:13)
at ChildProcess.EventEmitter.emit (domain.js:448:20)
at Process.ChildProcess._handle.onexit (internal/child_process.js:248:12) [ /home/yellowtent/box/node_modules/express/lib/application.js:630:43 ]

So i deleted the List and pasted everything again now i am getting

Box POST /api/v1/network/blocklist 500 Internal Server Error Response timeout 20001.588 ms - 72
ERROR [object Object] [ /home/yellowtent/box/node_modules/express/lib/application.js:630:43 ]

I will check the list on duplicates but, is there any Limits on IP Addresses or how much you can configure for the first time?
Best Regards

@timbo Yeah any information this ?

@Mallewax i think this would lead also to new people using cloudron

yeah i mean it would be for me i would never create pihole acessable for others its for private reasons vpn+pihole. So pihole would be listening, lets say on 10.9.0.0

Maybe in the future the idea could to configure other apps only availaie in the same VPN Network

looking really forward for PI-Hole and Wireguard really

@girish On app based first for Nextcloud, because Fail2Ban RegExpression is allready availaible.
But i think it should be also possible to restrict the acces to my.cloudron.com i know thath SMTP connection are goint through this hostname but to be honest. If someone can login to the Dashboard thath would not be fine its true thath there is a 2FA authentication but restricting the login to my.cloudron.com throug IP's would minimze really the Risk.

But i think it would be even easy by UFW just to allow from "IP to hostname on port 443"

Hi thanks for the Information any news or goals regarding firewall and security of Cloudron IP-Blocking or Fail2Ban maybe?