Using pfSense for website hosting protection
-
Cloudflare now has a service to protect websites.
I am looking for a way to protect hosted websites from bad actors.
I would like to block repeated failed ssh attempts.
I would also like to block (and restrict the user for a period of time) URL attempts like "POST /api.php".
Ideally, I would like to block any PHP call.Having a pfSense solution for website hosting would be very nice to have.
-
@jimfreeze An IDS package like Snort or Suricata has rules that can look for things like SSH attempts or other web requests. There isn't a great way to block specific URLs but maybe you can write your own rules if you're really familiar with doing so. I would read up on implementing it in the forum here before jumping in, and not block by default for a while until you can observe what alerts are being triggered.
-
This post is deleted! -
This post is deleted!
