Trusted IP Lists for FirewallD, NGINX and fail2ban
Official reference for the GetPageSpeed trusted-lists packages: auto-updating IP allowlists for Cloudflare, Stripe, PayPal, Googlebot, OpenAI and 30+ services, consumable by FirewallD, NGINX and…
firewall
Practical firewall guides from the GetPageSpeed engineering team: configuration, performance tuning and security for production Linux servers.
5 articles
NGINX WAF Module: Lightweight Web Application Firewall
Install and configure the ngx_waf module to protect NGINX against SQL injection, XSS, malicious bots, and CC attacks. Includes IP blacklists, regex rules, rate…
NGINX Honeypot 3.0: Advanced IP Blocking with nftables
NGINX Honeypot 3.0 introduces the ngx_nftset_access module - a complete rewrite using modern nftables instead of legacy ipset. Auto-ban attackers, rate-limit abusers, and challenge…
fds FirewallD Made Easy: Trusted Lists
Managing a Linux firewall shouldn’t require memorizing pages of firewall-cmd syntax. Yet that’s exactly what FirewallD demands for everyday tasks like blocking an abusive…
Ban Bad IPs and Networks with FirewallD
Now this is how you ban the bad guys from your server with the convenient Firewalld drop zone.