# Firewalls & Security **URL:** https://forum.hhf.technology/c/networking/firewalls-security/63.md [Latest](https://forum.hhf.technology/latest.md) · [Categories](https://forum.hhf.technology/categories.md) · [Tags](https://forum.hhf.technology/tags.md) --- ## [About the Firewalls & Security category](https://forum.hhf.technology/t/about-the-firewalls-security-category/120)
**Author:** [@amkindly](https://forum.hhf.technology/u/amkindly)\ **Replies:** 0\ **Last updated:** [October 9, 2024, 6:03pm UTC](https://forum.hhf.technology/t/about-the-firewalls-security-category/120 "2024-10-09T18:03:58Z")
Hardening and defence: CrowdSec, firewalls, geo-blocking, Fail2ban, WAF rules, bot protection and SSH lockdown for self-hosted stacks. What belongs here: CrowdSec (and CrowdSec Manager for Pangolin), Fail2ban, UFW/iptab… --- ## [Securing Your Cloudpanel Server UI and SSH/SFTP with ZeroTier: A Complete Guide 2024](https://forum.hhf.technology/t/securing-your-cloudpanel-server-ui-and-ssh-sftp-with-zerotier-a-complete-guide-2024/430)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [December 2, 2024, 12:23pm UTC](https://forum.hhf.technology/t/securing-your-cloudpanel-server-ui-and-ssh-sftp-with-zerotier-a-complete-guide-2024/430 "2024-12-02T12:23:18Z")
Introduction This guide will show you how to secure your CloudPanel server’s administrative interfaces using ZeroTier. By following this guide, you’ll restrict CloudPanel UI (port 8443) and SSH/SFTP access (port 22) to o… --- ## [CrowdSec Removal Script: Technical Overview (Cloudpanel, Ubuntu)](https://forum.hhf.technology/t/crowdsec-removal-script-technical-overview-cloudpanel-ubuntu/408)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [November 19, 2024, 4:26am UTC](https://forum.hhf.technology/t/crowdsec-removal-script-technical-overview-cloudpanel-ubuntu/408 "2024-11-19T04:26:19Z")
Script Purpose A comprehensive Bash script designed to completely remove CrowdSec components from a Linux system, providing flexible uninstallation options. Key Functionalities Prerequisite Checks Root privilege valida… --- ## [Securing Your Cloudpanel Server UI and SSH/SFTP with Tailscale: A Complete Guide 2024](https://forum.hhf.technology/t/securing-your-cloudpanel-server-ui-and-ssh-sftp-with-tailscale-a-complete-guide-2024/429)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [December 1, 2024, 2:05pm UTC](https://forum.hhf.technology/t/securing-your-cloudpanel-server-ui-and-ssh-sftp-with-tailscale-a-complete-guide-2024/429 "2024-12-01T14:05:54Z")
Securing Your Server with Tailscale: A Complete Guide Want to secure your CloudPanel server and restrict access to only authorized users? We’ll walk you through using our automated script that sets up Tailscale and confi… --- ## [You Need to Read This If You Are Proxmox User, and Why You Shouldn't Rely Solely on Proxmox](https://forum.hhf.technology/t/you-need-to-read-this-if-you-are-proxmox-user-and-why-you-shouldnt-rely-solely-on-proxmox/339)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [November 2, 2024, 1:42pm UTC](https://forum.hhf.technology/t/you-need-to-read-this-if-you-are-proxmox-user-and-why-you-shouldnt-rely-solely-on-proxmox/339 "2024-11-02T13:42:23Z")
Proxmox Virtual Environment (PVE) is a powerful platform widely used for managing virtual machines and containers. One of its useful features is the built-in firewall, which allows users to configure rules for both the h… --- ## [CrowdSec Manager for Pangolin: User Guide](https://forum.hhf.technology/t/crowdsec-manager-for-pangolin-user-guide/579)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 53\ **Last updated:** [May 24, 2026, 6:14pm UTC](https://forum.hhf.technology/t/crowdsec-manager-for-pangolin-user-guide/579 "2026-05-24T18:14:43Z")
From Bash Script to Web Application: The CrowdSec Manager Evolution Migration CrowdSec Manager has evolved from a command-line bash script into a full-featured web application. This migration represents a significant lea… --- ## [Secure Your VM/VPS/ Pangolin Server with GeoShield: A Country-Based IP Blocking Solution](https://forum.hhf.technology/t/secure-your-vm-vps-pangolin-server-with-geoshield-a-country-based-ip-blocking-solution/994)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 17\ **Last updated:** [April 14, 2026, 9:26am UTC](https://forum.hhf.technology/t/secure-your-vm-vps-pangolin-server-with-geoshield-a-country-based-ip-blocking-solution/994 "2026-04-14T09:26:17Z")
Introduction GeoShield is a powerful, fully automated bash script that simplifies the process of implementing country-based IP blocking at the firewall level. Whether you’re running a personal VPS, a company server, or a… --- ## [Pangolin Stack Backup & Update Management Script-December-2025-Version](https://forum.hhf.technology/t/pangolin-stack-backup-update-management-script-december-2025-version/591)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 28\ **Last updated:** [April 4, 2026, 7:11pm UTC](https://forum.hhf.technology/t/pangolin-stack-backup-update-management-script-december-2025-version/591 "2026-04-04T19:11:02Z")
Pangolin Stack Backup & Update Management Script Tested on Debian, Alma, and Ubuntu 24.04(Prefered) Introduction This guide explains how to use the Pangolin Stack Backup & Management Script, a utility for managing Doc… --- ## [Pangolin Monitor and Notification Discord - User Guide](https://forum.hhf.technology/t/pangolin-monitor-and-notification-discord-user-guide/703)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 10\ **Last updated:** [February 8, 2026, 7:04pm UTC](https://forum.hhf.technology/t/pangolin-monitor-and-notification-discord-user-guide/703 "2026-02-08T19:04:44Z")
Introduction Pangolin Monitor is a monitoring solution for your Pangolin stack, providing real-time monitoring of containers, system resources, and security metrics with Discord notifications. This menu-based utility … --- ## [Pangolin-Traefik Log Analyzer-March 2025](https://forum.hhf.technology/t/pangolin-traefik-log-analyzer-march-2025/704)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 5\ **Last updated:** [October 2, 2025, 5:36pm UTC](https://forum.hhf.technology/t/pangolin-traefik-log-analyzer-march-2025/704 "2025-10-02T17:36:10Z")
Introduction The Traefik Log Analyzer is a powerful command-line tool designed to help you analyze Traefik proxy server logs. It can parse both standard and JSON format logs, providing insights into traffic patterns, … --- ## [Securing SSH with Tailscale for Pangolin VPS](https://forum.hhf.technology/t/securing-ssh-with-tailscale-for-pangolin-vps/497)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 1\ **Last updated:** [February 16, 2025, 8:42am UTC](https://forum.hhf.technology/t/securing-ssh-with-tailscale-for-pangolin-vps/497 "2025-02-16T08:42:33Z")
Securing SSH with Tailscale for Pangolin VPS Overview This guide explains how to secure SSH access on your Pangolin VPS using Tailscale and includes instructions for both OpenSSH and PuTTY users. The setup script creates… --- ## [Complete Guide to Deploying TraefikShaper Security with Pangolin](https://forum.hhf.technology/t/complete-guide-to-deploying-traefikshaper-security-with-pangolin/1144)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 7\ **Last updated:** [May 3, 2025, 12:19pm UTC](https://forum.hhf.technology/t/complete-guide-to-deploying-traefikshaper-security-with-pangolin/1144 "2025-05-03T12:19:44Z")
This guide will walk you through integrating TraefikShaper with Pangolin to add dynamic IP whitelisting capabilities to your self-hosted services. This security layer allows temporary access to your services through an a… --- ## [Advance Guide- Protecting Your Pangolin Stack from SYN Flood Attacks](https://forum.hhf.technology/t/advance-guide-protecting-your-pangolin-stack-from-syn-flood-attacks/558)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [February 15, 2025, 6:29pm UTC](https://forum.hhf.technology/t/advance-guide-protecting-your-pangolin-stack-from-syn-flood-attacks/558 "2025-02-15T18:29:00Z")
USE THIS GUIDE WITH CATION! Performance impact if not deployed correctly. Pangolin provides an excellent solution for secure tunneled reverse proxying, but like any internet-facing service, it can be vulnerable to variou… --- ## [Analyse script Cloudplanel](https://forum.hhf.technology/t/analyse-script-cloudplanel/425)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [November 28, 2024, 9:41pm UTC](https://forum.hhf.technology/t/analyse-script-cloudplanel/425 "2024-11-28T21:41:03Z")
I’ve created a Bash script that: Analyzes Nginx logs across all user directories Tracks outbound traffic using netstat/ss Monitors user activities and authentication attempts Checks for recent file changes To use the … --- ## [Protect Your Linux/Cloudpanel Server from Attackers Using Cowrie SSH Honeypot](https://forum.hhf.technology/t/protect-your-linux-cloudpanel-server-from-attackers-using-cowrie-ssh-honeypot/363)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [November 6, 2024, 4:55pm UTC](https://forum.hhf.technology/t/protect-your-linux-cloudpanel-server-from-attackers-using-cowrie-ssh-honeypot/363 "2024-11-06T16:55:02Z")
Hacker attacks have been a problem for a long time. Managing our servers is essential to prevent them from being hacked. I’ll introduce you to Cowrie SSH, an open-source tool that creates a honeypot to lure hackers into… --- ## [GeoIP Based Rule Configuration with UFW](https://forum.hhf.technology/t/geoip-based-rule-configuration-with-ufw/345)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 1\ **Last updated:** [November 3, 2024, 3:11pm UTC](https://forum.hhf.technology/t/geoip-based-rule-configuration-with-ufw/345 "2024-11-03T15:11:02Z")
UFW, a firewall used in Linux distributions , was developed to simplify the configuration of the IPtables firewall. It is also worth remembering that UFW is disabled by default, so you need to enable it after installati… --- ## [Avoid Expensive Errors: An In-Depth Exploration of Risky Linux Configurations and Their Solutions](https://forum.hhf.technology/t/avoid-expensive-errors-an-in-depth-exploration-of-risky-linux-configurations-and-their-solutions/333)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [November 2, 2024, 10:24am UTC](https://forum.hhf.technology/t/avoid-expensive-errors-an-in-depth-exploration-of-risky-linux-configurations-and-their-solutions/333 "2024-11-02T10:24:50Z")
Avoid Expensive Errors: An In-Depth Exploration of Risky Linux Configurations and Their Solutions Because one small mistake can cause a colossal mess! We all know Linux gives us superpowers, but with great power comes… … --- ## [Cloudflare WAF rules to block suspicious traffic from China](https://forum.hhf.technology/t/cloudflare-waf-rules-to-block-suspicious-traffic-from-china/318)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [October 30, 2024, 10:02am UTC](https://forum.hhf.technology/t/cloudflare-waf-rules-to-block-suspicious-traffic-from-china/318 "2024-10-30T10:02:01Z")
cf-waf-block-asn.rules: Blocks ASN of most cloud providers in China: Tencent, Alibaba, Huawei, Baidu, Bytedance, Qihu 360, JD/Jingdong, Xiaomi, Netease Use with caution! This rule set could block some Fediverse instance… --- ## [Transform Your Home Network with pfSense 2.7.2](https://forum.hhf.technology/t/transform-your-home-network-with-pfsense-2-7-2/298)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 11:50am UTC](https://forum.hhf.technology/t/transform-your-home-network-with-pfsense-2-7-2/298 "2024-10-24T11:50:57Z")
pfSense offers a robust and flexible solution for home network management, especially with its version 2.7.2. Here’s an engaging overview of setting up pfSense for your home environment. Transform Your Home Network with… --- ## [Cloudflare WAF Block Wordpress Requests](https://forum.hhf.technology/t/cloudflare-waf-block-wordpress-requests/282)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [October 20, 2024, 5:21pm UTC](https://forum.hhf.technology/t/cloudflare-waf-block-wordpress-requests/282 "2024-10-20T17:21:30Z")
Cloudflare WAF Block Wordpress Requests The main purpose of this site is to block out requests which target on Wordpress Sites, BUT WE DONT USES IT ON WORDPRESS! IF You DONT Know what you are doing it will break your wor… --- ## [How does the 'Access-Control-Allow-Origin' header work?](https://forum.hhf.technology/t/how-does-the-access-control-allow-origin-header-work/262)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [October 19, 2024, 5:02am UTC](https://forum.hhf.technology/t/how-does-the-access-control-allow-origin-header-work/262 "2024-10-19T05:02:50Z")
The discussion surrounding Cross-Origin Resource Sharing (CORS) often leads to misconceptions regarding the origin of the headers involved. This confusion can be alleviated by understanding the underlying principles of t… --- ## [Pentesting Tactics](https://forum.hhf.technology/t/pentesting-tactics/252)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 1\ **Last updated:** [October 18, 2024, 12:16pm UTC](https://forum.hhf.technology/t/pentesting-tactics/252 "2024-10-18T12:16:48Z")
Welcome to Pentesting Tactics, your ultimate reference guide for effective penetration testing, designed for both beginners and experienced professionals in the cybersecurity field. Our carefully curated content directs… --- ## [If my VM's get compromised my Ci/CD creates a new one. But that's because it treats my infra as cattle](https://forum.hhf.technology/t/if-my-vms-get-compromised-my-ci-cd-creates-a-new-one-but-thats-because-it-treats-my-infra-as-cattle/248)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 1\ **Last updated:** [October 18, 2024, 9:49am UTC](https://forum.hhf.technology/t/if-my-vms-get-compromised-my-ci-cd-creates-a-new-one-but-thats-because-it-treats-my-infra-as-cattle/248 "2024-10-18T09:49:41Z")
When virtual machines (VMs) are compromised in a CI/CD environment, treating infrastructure as “cattle”—where resources are easily replaceable rather than precious—can be a strategic approach. Here’s how i think to effe… --- ## [An open Docker port gives basically root access. Simple HomeLab Mistake](https://forum.hhf.technology/t/an-open-docker-port-gives-basically-root-access-simple-homelab-mistake/247)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [October 18, 2024, 9:45am UTC](https://forum.hhf.technology/t/an-open-docker-port-gives-basically-root-access-simple-homelab-mistake/247 "2024-10-18T09:45:53Z")
An open Docker port can indeed pose significant security risks, particularly if the container is running in privileged mode or if users have access to the Docker socket. This effectively grants them root-level access on … --- ## [Securing Your Homelab: Navigating the Complexities of Remote Access and Trust](https://forum.hhf.technology/t/securing-your-homelab-navigating-the-complexities-of-remote-access-and-trust/233)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [January 2, 2024, 8:46am UTC](https://forum.hhf.technology/t/securing-your-homelab-navigating-the-complexities-of-remote-access-and-trust/233 "2024-01-02T08:46:00Z")
Securing Your Homelab: Navigating the Complexities of Remote Access and Trust Trying to set up my homelab and have it be reachable from the internet I had serious problems getting to where I wanted to be, although I nev…