ocean@lemmy.selfhostcat.com to Selfhosted@lemmy.worldEnglish · 1 month agoWhat steps do you take to secure your server and your selfhosted services?message-squaremessage-square51fedilinkarrow-up10arrow-down10file-text
arrow-up10arrow-down1message-squareWhat steps do you take to secure your server and your selfhosted services?ocean@lemmy.selfhostcat.com to Selfhosted@lemmy.worldEnglish · 1 month agomessage-square51fedilinkfile-text
Inspired by this comment to try to learn what I’m missing. Cloudflare proxy Reverse Proxy Fail2ban Docker containers on their own networks
minus-squareInvertedParallax@lemm.eelinkfedilinkEnglisharrow-up0·1 month agoThere are ip lists that let you iptables drop all traffic from China and Russia. Strongly recommend.
minus-squareocean@lemmy.selfhostcat.comOPlinkfedilinkEnglisharrow-up0·1 month agoI was auto banning all countries but my own but now I’m hosting one resource that has an audience including Chinese… Good advice outside of this use case! :)
minus-squareInvertedParallax@lemm.eelinkfedilinkEnglisharrow-up0·1 month agoYeah, there were other countries to ban, but those 2 cut my attacks down 90%. Also consider a honeypot that triggers when anyone tries to ssh it at all.
minus-squareLka1988@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up0·edit-21 month agoMy UDM has this capability. I’ve blocked quite a few countries that it logged as trying to get into my network. Great little internet cylinder.
Anything else?
There are ip lists that let you iptables drop all traffic from China and Russia.
Strongly recommend.
I was auto banning all countries but my own but now I’m hosting one resource that has an audience including Chinese…
Good advice outside of this use case! :)
Yeah, there were other countries to ban, but those 2 cut my attacks down 90%.
Also consider a honeypot that triggers when anyone tries to ssh it at all.
My UDM has this capability. I’ve blocked quite a few countries that it logged as trying to get into my network. Great little internet cylinder.