[GH-ISSUE #1539] Can you add port management (firewall) function in this project ? #1169

Closed
opened 2026-02-26 06:36:02 +03:00 by kerem · 4 comments
Owner

Originally created by @spysir on GitHub (Oct 31, 2021).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1539

This is a great project !I like it very much ! Can you add port management (firewall) function in this project ? Thanks

Originally created by @spysir on GitHub (Oct 31, 2021). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1539 This is a great project !I like it very much ! Can you add port management (firewall) function in this project ? Thanks
kerem 2026-02-26 06:36:02 +03:00
  • closed this issue
  • added the
    wontfix
    label
Author
Owner

@chaptergy commented on GitHub (Oct 31, 2021):

What do you mean with firewall function?
In general firewalling is not really the job of a proxy. It just forwards packets it receives to somewhere else. In general a proxy would listen on very few ports.

Furthermore since this is a dockerized application it does not have access to the hosts networking, and can only work inside the container.

<!-- gh-comment-id:955744370 --> @chaptergy commented on GitHub (Oct 31, 2021): What do you mean with firewall function? In general firewalling is not really the job of a proxy. It just forwards packets it receives to somewhere else. In general a proxy would listen on very few ports. Furthermore since this is a dockerized application it does not have access to the hosts networking, and can only work inside the container.
Author
Owner

@psharma04 commented on GitHub (Nov 1, 2021):

You could use the Stream function as a rudimentary firewall, disabling ports to block them? However I agree with Chaptergy, that's not really what this is designed for. For firewalls, it's best to use something like IPTables, and then a management service like UFW or easywall, rather than a Docker container.
See this Reddit thread: https://www.reddit.com/r/docker/comments/b6cwhz/are_there_firewall_containers/

<!-- gh-comment-id:955857973 --> @psharma04 commented on GitHub (Nov 1, 2021): You could use the Stream function as a rudimentary firewall, disabling ports to block them? However I agree with Chaptergy, that's not really what this is designed for. For firewalls, it's best to use something like IPTables, and then a management service like UFW or easywall, rather than a Docker container. See this Reddit thread: https://www.reddit.com/r/docker/comments/b6cwhz/are_there_firewall_containers/
Author
Owner

@denppa commented on GitHub (Nov 4, 2021):

You could use the Stream function as a rudimentary firewall, disabling ports to block them? However I agree with Chaptergy, that's not really what this is designed for. For firewalls, it's best to use something like IPTables, and then a management service like UFW or easywall, rather than a Docker container. See this Reddit thread: https://www.reddit.com/r/docker/comments/b6cwhz/are_there_firewall_containers/

So I agree too, this is quite out of this project's goal.
I did try to use ufw but due to docker messing with iptables it is not effective.

Instead I suggest OP or anyone interested to use the firewall feature your service provider, digital ocean or linode or whatever provides, set one up there. And it would be the same as putting a router in front of your network, creating a LAN and therefore protected.

Please do let me know if this isn't the best way of handling things or might pose security problems.

<!-- gh-comment-id:961263831 --> @denppa commented on GitHub (Nov 4, 2021): > > > You could use the Stream function as a rudimentary firewall, disabling ports to block them? However I agree with Chaptergy, that's not really what this is designed for. For firewalls, it's best to use something like IPTables, and then a management service like UFW or easywall, rather than a Docker container. See this Reddit thread: https://www.reddit.com/r/docker/comments/b6cwhz/are_there_firewall_containers/ So I agree too, this is quite out of this project's goal. I did try to use ufw but due to docker messing with iptables it is not effective. Instead I suggest OP or anyone interested to use the firewall feature your service provider, digital ocean or linode or whatever provides, set one up there. And it would be the same as putting a router in front of your network, creating a LAN and therefore protected. Please do let me know if this isn't the best way of handling things or might pose security problems.
Author
Owner

@chaptergy commented on GitHub (Nov 4, 2021):

I'm closing this issue as a wontfix, as this is really out of scope.

<!-- gh-comment-id:961271710 --> @chaptergy commented on GitHub (Nov 4, 2021): I'm closing this issue as a wontfix, as this is really out of scope.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#1169
No description provided.