[GH-ISSUE #2150] Firewall for the Nginx Proxy Manager #1540

Closed
opened 2026-02-26 07:31:29 +03:00 by kerem · 4 comments
Owner

Originally created by @NixNux123 on GitHub (Jul 8, 2022).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/2150

Is your feature request related to a problem? Please describe.

No, but it can be usefull to prevent Problems

Describe the solution you'd like

Can you add a Firewall/IPTables to the UI so you can block IPs over the UI

Describe alternatives you've considered

You can make Lists and add IPs that are blocked and to every Host you can add one of the Lists like the Access Lists.

Additional context

Thank you

Originally created by @NixNux123 on GitHub (Jul 8, 2022). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/2150 <!-- Are you in the right place? - If you are looking for support on how to get your upstream server forwarding, please consider asking the community on Reddit. - If you are writing code changes to contribute and need to ask about the internals of the software, Gitter is the best place to ask. - If you think you found a bug with NPM (not Nginx, or your upstream server or MySql) then you are in the *right place.* I have a new feature --> **Is your feature request related to a problem? Please describe.** <!-- A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] --> No, but it can be usefull to prevent Problems **Describe the solution you'd like** <!-- A clear and concise description of what you want to happen. --> Can you add a Firewall/IPTables to the UI so you can block IPs over the UI **Describe alternatives you've considered** <!-- A clear and concise description of any alternative solutions or features you've considered. --> You can make Lists and add IPs that are blocked and to every Host you can add one of the Lists like the Access Lists. **Additional context** <!-- Add any other context or screenshots about the feature request here. --> Thank you
kerem 2026-02-26 07:31:29 +03:00
Author
Owner

@the1ts commented on GitHub (Jul 9, 2022):

I'm not sure that the correct place for IP blocking is on the container for NPM. To run iptables inside a container, I believe you need to run the container with NET_ADMIN capabilities, this means all traffic for all containers will be available on that container. This sounds like an increase for insecurity. The place for IPs to be stopped is as early as possible rather than at the container level which is almost the last layer.

<!-- gh-comment-id:1179604231 --> @the1ts commented on GitHub (Jul 9, 2022): I'm not sure that the correct place for IP blocking is on the container for NPM. To run iptables inside a container, I believe you need to run the container with NET_ADMIN capabilities, this means all traffic for all containers will be available on that container. This sounds like an increase for insecurity. The place for IPs to be stopped is as early as possible rather than at the container level which is almost the last layer.
Author
Owner

@Issykul commented on GitHub (Jul 12, 2022):

Use ufw instead on your docker host. Way better security and ease of use.

<!-- gh-comment-id:1181531534 --> @Issykul commented on GitHub (Jul 12, 2022): Use `ufw` instead on your docker host. Way better security and ease of use.
Author
Owner

@github-actions[bot] commented on GitHub (Feb 13, 2024):

Issue is now considered stale. If you want to keep it open, please comment 👍

<!-- gh-comment-id:1940169072 --> @github-actions[bot] commented on GitHub (Feb 13, 2024): Issue is now considered stale. If you want to keep it open, please comment :+1:
Author
Owner

@github-actions[bot] commented on GitHub (Mar 29, 2025):

Issue was closed due to inactivity.

<!-- gh-comment-id:2763016851 --> @github-actions[bot] commented on GitHub (Mar 29, 2025): Issue was closed due to inactivity.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#1540
No description provided.