Comment

Your services would first of all need some sort of integration to report failed authentication attempts to your firewall or you wouldn’t have anything to act on to start the block. Sounds complicated.

If I were you I would ponder if it wouldn’t be easier to just setup a headscale/wireguard/openvpn server and connect to your other services through that.

My favourite home firewall right now would be opnsense

source

Sort:hotnew top

Zenlix@lemmy.ml ⁨3⁩ ⁨days⁩ ago
I fuess I can get that info from most services vy parsing their logs.

When using a vpn server, only I could access the services right?

I will look into opnsense.

source
- anamethatisnt@sopuli.xyz ⁨3⁩ ⁨days⁩ ago
  
  Isnt opnsense only for bsd? I am running linux.
  opnsense is bsd based yes, you can either run it on it’s own hardware in front of your server or you can run it as a virtual machine and passthrough your hosts network ports to it for WAN/LAN.
  
  source
- anamethatisnt@sopuli.xyz ⁨3⁩ ⁨days⁩ ago
  
  When using a vpn server, only I could access the services right?
  
  You can easily setup vpn users for friends/family but a random person on the internet won’t reach your services if you block access from WAN and forces everyone to go through the vpn server.
  
  source