NGINX Honeypot 3.0: Advanced IP Blocking with nftables
by Danila Vershinin, February 15, 2026
NGINX Honeypot 3.0 introduces the ngx_nftset_access module – a complete rewrite using modern nftables instead of legacy ipset. Auto-ban attackers, rate-limit abusers, and challenge bots with proof-of-work puzzles, all from within NGINX.
Read More...fds FirewallD Made Easy: Trusted Lists
by Danila Vershinin, February 8, 2026
Managing a Linux firewall shouldn’t require memorizing pages of firewall-cmd syntax. Yet that’s exactly what FirewallD demands for everyday tasks like blocking an abusive IP or whitelisting PayPal webhooks. Enter fds and trusted-lists — two tools from the GetPageSpeed repository that transform fds FirewallD management from painful to pleasant. Together, they give you: fds: Block […]
Read More...Ban Bad IPs and Networks with FirewallD
by Danila Vershinin, April 7, 2018
Now this is how you ban the bad guys from your server with the convenient Firewalld drop zone.
Read More...