mirror of
https://github.com/NginxProxyManager/nginx-proxy-manager.git
synced 2026-04-25 01:15:51 +03:00
[GH-ISSUE #1539] Can you add port management (firewall) function in this project ? #1169
Labels
No labels
awaiting feedback
bug
cannot reproduce
dns provider request
duplicate
enhancement
enhancement
enhancement
good first issue
help wanted
invalid
need more info
no certbot plugin available
product-support
pull-request
question
stale
troll
upstream issue
v2
v2
v2
v3
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/nginx-proxy-manager-NginxProxyManager#1169
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @spysir on GitHub (Oct 31, 2021).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1539
This is a great project !I like it very much ! Can you add port management (firewall) function in this project ? Thanks
@chaptergy commented on GitHub (Oct 31, 2021):
What do you mean with firewall function?
In general firewalling is not really the job of a proxy. It just forwards packets it receives to somewhere else. In general a proxy would listen on very few ports.
Furthermore since this is a dockerized application it does not have access to the hosts networking, and can only work inside the container.
@psharma04 commented on GitHub (Nov 1, 2021):
You could use the Stream function as a rudimentary firewall, disabling ports to block them? However I agree with Chaptergy, that's not really what this is designed for. For firewalls, it's best to use something like IPTables, and then a management service like UFW or easywall, rather than a Docker container.
See this Reddit thread: https://www.reddit.com/r/docker/comments/b6cwhz/are_there_firewall_containers/
@denppa commented on GitHub (Nov 4, 2021):
So I agree too, this is quite out of this project's goal.
I did try to use ufw but due to docker messing with iptables it is not effective.
Instead I suggest OP or anyone interested to use the firewall feature your service provider, digital ocean or linode or whatever provides, set one up there. And it would be the same as putting a router in front of your network, creating a LAN and therefore protected.
Please do let me know if this isn't the best way of handling things or might pose security problems.
@chaptergy commented on GitHub (Nov 4, 2021):
I'm closing this issue as a wontfix, as this is really out of scope.