| bots.txt | ||
| crawlers.txt | ||
| firewall.service | ||
| firewall.sh | ||
| ipv4-filter.nft | ||
| ipv6-filter.nft | ||
| nft.rules | ||
| ReadMe.md | ||
| safe.txt | ||
Prerequisites
- NFT
- Redis
How to Run
cd /opt
git clone https://git.poster.place/verita84/firewall
Configure Redis Schema
bash firewall.sh import-db
Configure firewall.sh
- Edit the ports to open
- Modify NGINX_ACCESS to your NGINX config file
Enable SystemD
cp firewall.service /etc/systemd/system
systemctl enable --now firewall
Add Detection by the Minute via Cron
*/1 * * * * bash /opt/firewall/firewall.sh attacker-protection
*/5 * * * * bash /opt/firewall/firewall.sh forgive