From d342830414cd9924fca79f09bba97b5fa13b36ef Mon Sep 17 00:00:00 2001 From: jonathanmmm <32403139+jonathanmmm@users.noreply.github.com> Date: Fri, 3 May 2019 10:08:18 +0200 Subject: [PATCH] Clarifying chain=forward setting when using reverse proxy --- Fail2Ban-Setup.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Fail2Ban-Setup.md b/Fail2Ban-Setup.md index 7cb0a44..9d4dfaf 100644 --- a/Fail2Ban-Setup.md +++ b/Fail2Ban-Setup.md @@ -47,6 +47,8 @@ Note: Docker uses the FORWARD chain instead of the default INPUT chain. Therefor ``` action = iptables-allports[name=bitwarden, chain=FORWARD] ``` +**NOTE**: +Do not use this if you use a reverse proxy before docker container. If proxy, like apache2 or nginx is used, use the ports of the proxy and do not use chain=FORWARD, only when using Docker **without** proxy! Feel free to change the options as you see fit.