Skip to main content

NGINX Honeypot 3.0: Advanced IP Blocking with nftables


by Danila Vershinin, February 15, 2026

NGINX Honeypot 3.0 introduces the ngx_nftset_access module – a complete rewrite using modern nftables instead of legacy ipset. Auto-ban attackers, rate-limit abusers, and challenge bots with proof-of-work puzzles, all from within NGINX.

Read More...

fds FirewallD Made Easy: Trusted Lists


by Danila Vershinin, February 8, 2026

Managing a Linux firewall shouldn’t require memorizing pages of firewall-cmd syntax. Yet that’s exactly what FirewallD demands for everyday tasks like blocking an abusive IP or whitelisting PayPal webhooks. Enter fds and trusted-lists — two tools from the GetPageSpeed repository that transform fds FirewallD management from painful to pleasant. Together, they give you: fds: Block […]

Read More...

Ban Bad IPs and Networks with FirewallD


by Danila Vershinin, April 7, 2018

Now this is how you ban the bad guys from your server with the convenient Firewalld drop zone.

Read More...