What firewall ship with EE?

[RoldanLT]

Like CSF or Fail2ban?

[janiosarmento]

None, AFAIK.

I install Fail2Ban in my EE boxes, and it works great (but I still appreciate CSF more than Fail2Ban).

[RoldanLT]

I hope, one of them will be included in the next version. I think fail2ban can combat layer 7 type of attack.

[rahul286]

We use fail2ban internally with iptables

Survive DDOS attack with Nginx's and fail2ban

Block bruteforce attack on WordPress wp-login.php with Nginx only

We haven’t explored CSF so I won’t be able to comment about it. Sorry. But you can add it to github issue tracker, may be with some example and references.

We might replace or add UFW as we found it’s easier to work for whitelisting/blocking ip/ports.

[RoldanLT]

We use fail2ban internally with iptables

https://rtcamp.com/tutorials/nginx/fail2ban/ https://rtcamp.com/tutorials/nginx/block-wp-login-php-bruteforce-attack/

Why not include it by default on EE installation?

[RoldanLT]

We might replace or add UFW as we found it’s easier to work for whitelisting/blocking ip/ports.

Yes, I’m Ubuntu 15.04 Desktop user. And this UFW is just really handy.

[rahul286]

Why not include it by default on EE installation?

I really wish to include it and other stuff in EE.

It’s just we do not have big enough team or revenue to expand team.

So things are moving at really slow pace.