Who's Attacking My Server?

Re:Who's Attacking My Server? by hutch120 on Sunday March 13, 2022 @05:11PM (#30665758)

I see these articles a lot, and always wonder why people go it alone. Can anyone link to a discussion about a distributed community run firewall? Does such a thing exist? If so, please comment.

[ Parent | on HN ]

Re:Who's Attacking My Server? by wila on Sunday March 13, 2022 @07:41PM (#30666927)

Don't know about "community run firewall", but if you have a few hosts then you can run CSF/LFD in a cluster config.

See for example: https://www.nixtree.com/blog/csf-cluster-setup-for-hosting-c...

[ Parent | on HN ]

Re:Who's Attacking My Server? by klausagnoletti on Monday March 14, 2022 @04:25AM (#30669773)

I don't know exaxtly what you mean by a distributed community run firewall but https://crowdsec.net/ collects information (anonymously) on the attacks users see and shares it with all other users after vetting them. So in this way the community helps itself (or each other, if you will). Currently around 800k signals are collected daily and around 19k ips are shared back to users as blocklists.

[ Parent | on HN ]