nsoporte/nsfirewall repository overview

⁠Nsfirewall

NSFIREWALL is a docker image that contains fail2ban and shorewall firewall, it can be used as shorewall standalone or both

⁠Volumes:

• /etc/shorewall: Shorewall configuration files
• /var/log/shorewall: Shorewall logs
• /etc/fail2ban: Fail2ban configuration files
• /fail2ban: Fail2ban database and pid files

⁠Environment:

• FAIL2BAN = yes|no : Fail2ban enabled or not ( not enabled by default )

⁠NOTES:

• Run with privileged flag
• Run with network_mode = host

⁠Useful Commands

• Show shorewall banned ips:
  • docker exec -it nsfirewall shorewall show dynamic
• Unban IP from FAIL2BAN
  • docker exec -it nsfirewall fail2ban-client unban IP
• Reload shorewall configure without restart container
  • docker exec -it nsfirewall shorewall reload
• Clean shorewall rules:
  • docker exec -it nsfirewall shorewall clear
  • docker stop nsfirewall

⁠Docker-Compose

version: '3.4'

services:
 nsfirewall:
  image: nsoporte/nsfirewall
  container_name: nsfirewall
  restart: always
  privileged: true
  network_mode: host
  environment:
   - FAIL2BAN=yes
  volumes:
   - /etc/localtime:/etc/localtime:rw
   - /data/etc/nsfirewall/shorewall:/etc/shorewall
   - /data/etc/nsfirewall/fail2ban:/etc/fail2ban
   - /data/var/lib/nsfirewall/fail2ban:/fail2ban
   - /var/log/auth.log:/var/log/auth.log:ro
   - /data/var/log/asterisk:/var/log/asterisk:ro
   - /data/var/log/nsfirewall/shorewall:/var/log/shorewall