Can we have the ability to set destinations as we are able to set source addresses on the firewall, please.

June 3, 2018 933

By:

flyingsaucer

I like our firewall, but I have private networking and cannot set destinations so that ports for one host are not open to all hosts behind the same firewall.

Be the first one to answer this question.

question

Does the cloud firewall prevent IP address spoofing?

As the cloud firewall filters based on source IP addresses: Would it be possible for an attacker to create packets that have a spoofed source IP address and thus break through the firewall? I mean, assuming the attacker knew any whitelisted source IP addresses... I'm asking for both, the external network interface as well as the private network interface. Thank you!
question

Digital Ocean firewall on private network?

Does the firewall affect private networking, or only the droplets public network?
question

How to deny certain IPs through cloud firewall but allow all others?

My goal is to: * Allow all TCP and UDP traffic for certain ports for incoming connections and allow all traffic for outgoing connections (both of which I already know how to do) * Maintain the ability to block particular IP addresses from accessing all droplets the cloud firewall protects (i.e. a droplet-wide ban), as I am hosting services on multiple droplets and want to offload most of the firewall controls to the cloud firewall system. I'd love to offload everything to it (i.e. VPN routing and such).... if anyone knows how to do that, please let me know.
question

Why does Digital Ocean allow spammers to use their service without even paying?

Why is it only DO that sends me spam emails? Why don't I get the same emails from AWS or Azure? I've reported it, not that I ever got a response outside your automated emails. Here's an idea - why not block outgoing port 25 until you have validated a credit card. At least that way you'd be making money from all the spammers that you host. You do realise that you are actually responsible for the customers that you choose for your services, right? You can't just say "oh bad people signed up, what a surprise".

Share

Share your Question

Can we have the ability to set destinations as we are able to set source addresses on the firewall, please.

Leave a Comment

Related

question

Does the cloud firewall prevent IP address spoofing?

question

Digital Ocean firewall on private network?

question

How to deny certain IPs through cloud firewall but allow all others?

question

Why does Digital Ocean allow spammers to use their service without even paying?

Almost there!