secure web and ssh server
-
I currently host my own gitlab server. This server is publicly accessible because I have clients from all over connecting to it pushing or pulling code that I develop from them. I have the server publicly limited to 443 and 22. No other protocol or port is allowed. I also have the same thing on the linux side. I know gitlab itself has its own security best practices which I am following, but that is on the linux side. The server is only allowed access to pre-registered clients as well as only ssh keys are allowed. My question is, does PFSense have a rate limit or throttling mechanism that would detect a large amount of traffic on 443 or 22 and block that IP for X time, sort of like fail2ban does? Does PFSense have something similar?
-
@mrjoli021
Maybe….
https://docs.netgate.com/pfsense/en/latest/firewall/configure.html#maximum-state-entries-this-rule-can-create -
@michmoor Perfect. That is what I was looking for. Thx