-
Enable deny rules (and rule ordering) for performance and multi-machine protection
I use tools like fail2ban which temporarily adds deny rules to a local firewall (iptables on Linux). It would be great if I could have these tools use the DO API to insert banned IPs into a Cloud Firewall instead. This would move the traffic fil...0
-
Provide a firewall droplet with IDS / IPS
Security is getting a bigger problem every day Currently we have a hybrid cloud using firewalls with IPS / IDS to prevent attacks in an early stage Nobody on the web is providing such a solution yet and this would be a great benefit for server adm...0
-
Allow dynamic DNS as source for inbound firewall rules
A good bit of DO users are developers that WFH. What if you could assign dynamic DNS as a source for firewall inbound rules? For example: In most cases I only want SSH allowed from my home's dynamic IP.1
-
Firewall rule comments
it'd be tremendously useful to have a comment field for firewall rules in the webui. For example, comment what the hosts/networks are (when the rule was created) or why the rule was added.1
-
Free Text Label Firewall Rules
It would be nice if we could label each of the firewall inbound and outbound rules (each row) with custom text so that we can know what is used for what. Days, weeks, months, and even years later sometimes we can forget why a port is open or a ru...1
-
Firewall - IPSec protocols 50 and 51
Hello Would be nice to have support for IPSec-ESP (50) and IPSec-AH (51) protocols in DigitalOcean Firewall. Currently I have to use iptables since DO FW is limited to TCP, UDP and ICMP1
-
More Rule Types for DO Cloud Firewalls
Hi, Proposal: have new rule types in the DO cloud firewall. The most useful rule I can think of right now is the ability to limit both connections and traffic transfer per source IP. Right now, these rules need to be implemented by you (e....0
-
Allow VRRP (i.e. req. for keepalived as used in several DO tutorials)
Hi, keepalived is one of the widely used tools when it comes to high-availability. It is pretty simple (although it allows quite complex setups as well) and runs on any platform without requiring additional subscriptions. Further, it is used in ...0
-
Firewall Aliases
When entering IP's it's very easy to forget what that IP was for.It would be nice if we could create aliases which give a meaningful name to single or multiple IPs. E.g. "Home Office", "Ottomatik Backups", etc. And then use those in firewall ...0
-
Ability to add note/description
We would like to be ability to write a note/description on firewall rules.0