firewall/ReadMe.md

Prerequisites

1. NFT
2. Redis

Install

• cd /opt
• git clone https://git.poster.place/verita84/firewall
• cp firewall.service /etc/systemd/system
• systemctl enable --now firewall

Configure Redis Schema

bash firewall.sh import-db

Configure firewall.sh

• Edit the portConfig variables to allow ports
• Modify NGINX_ACCESS to point to your NGINX config file

Add Detection by the Minute via Cron

*/1 * * * * bash /opt/firewall/firewall.sh attacker-protection
*/5 * * * * bash /opt/firewall/firewall.sh forgive
00 00 * * * bash /opt/firewall/firewall.sh export-db

Per the above, new attacks are searched every minute and temp blocks are forgiven every 5 minutes. The Redis DB is exported at midnight.

Accessing the Menu

bash firewall.sh

Custom Modules

• There are a few custom function modules to protect against certain DDOS attacks and they are named module-foo().
• Modules can be loaded by adding them to the attacker-protection() or watch() functions as needed