Open NixNux123 opened 2 years ago
I'm not sure that the correct place for IP blocking is on the container for NPM. To run iptables inside a container, I believe you need to run the container with NET_ADMIN capabilities, this means all traffic for all containers will be available on that container. This sounds like an increase for insecurity. The place for IPs to be stopped is as early as possible rather than at the container level which is almost the last layer.
Use ufw
instead on your docker host. Way better security and ease of use.
Issue is now considered stale. If you want to keep it open, please comment :+1:
Is your feature request related to a problem? Please describe.
No, but it can be usefull to prevent Problems
Describe the solution you'd like
Can you add a Firewall/IPTables to the UI so you can block IPs over the UI
Describe alternatives you've considered
You can make Lists and add IPs that are blocked and to every Host you can add one of the Lists like the Access Lists.
Additional context
Thank you