easywall icon indicating copy to clipboard operation
easywall copied to clipboard

Feature request: IP+PORT rules

Open pierrecorsini opened this issue 4 years ago • 1 comments

Hi

Thanks for this amazing tool; helped me a lot. I dont know if you accept/handle feature requests; at lest FYI, please find one below.

Summary

Provide a way to have more restricted rules that only accept if IP + PORT.

Actual

  • You can whitelist IP, whitelisted IP bypass all port rules
  • You can open port (others are by default closed).
  • If you do not open port 1324 but whiteliste IP A.B.C.D then ip A.B.C.D is still able to access host:1234.

Request

A way to combine (AND) IP + PORT. For instance:

  • A global configuration that says "AND between IP and PORT", if checked all the rules are combined to only accept if IP + PORT.
  • When adding an IP add a fields to also specify the PORT and tcp/udp.

pierrecorsini avatar Mar 01 '21 08:03 pierrecorsini

Hi @pc-robelbois ! This sounds interesting and yes, it is very useful for scenarios where you only want a port opened for one IP address. For Instance you have a linux server with samba installed and you need the samba port only from your company network. I will think about how to implement this the next weeks. Thank you for contributing the issue.

jp1337 avatar Mar 01 '21 10:03 jp1337