APF (Firewall & GeoIP Protection)

Our Firewall (APF) is firewall system designed around the essential needs of today's Internet deployed servers and the unique needs of custom deployed Linux installations. The configuration of APF is designed to be very informative and present the user with an easy to follow process, from top to bottom of the configuration file. The management of APF on a day-to-day basis is conducted from the command line with the 'apf' command, which includes detailed usage information and all the features one would expect from a current and forward thinking firewall solution.

The most common features of the firewall can be administered with the native BlueOnyx GUI that is included in this package. The package contains the APF GUI elements for BlueOnyx 5209R, 5210R and 5211R.

GeoIP Protection:

In the "Blacklist" tab you can specify whole countries from which you want to block all access to your server. The IP address ranges of the individual countries are provided by the IPDENY.COM IP database, of which we host copies on updates.blueonyx.it to not unduly abuse their infrastructure.

About this PKG:

* The BlueOnyx 5209R version of this PKG comes with the IPtables based "Advanced Policy Firewall".

* The BlueOnyx 5210R versions of this PKG comes with Firewalld support.

* The BlueOnyx 5211R versions of this PKG comes with Firewalld support.

This PKG works very well together with Fail2ban. It is recommended to install both APF and Fail2ban, so that Fail2ban can use APF to create dynamic blocks for suspicious or forbidden activity.