search

intercity / chef-repo

Set up your server to host Ruby on Rails apps. - Follow us on Twitter: @intercityup
MIT License
417 stars 82 forks source link

Add a basic firewall with ufw. #113

Open berkes opened 9 years ago

berkes commented 9 years ago

Ubuntu comes with ufw, a friendlier wrapper around iptables. ufw is not too hard to manage through chef.

It would be good to set up boxen with a basic firewall.

Probably others have better ideas, but here is my basic set-up:

Alternatively, we could add a [firewall][ssh-whitelist] attribute, containing a list of IP-addresses that have access to SSH: that way you can close down SSH for the world except your own ip-addresses.

jvanbaarsen commented 9 years ago

@berkes Thanks for your input. I think its a good idea, and we will definitely look into this a bit further. If you have ideas how to solve this, please submit a pull request for this.