Only local site on ADD new site #1769

New Issue

MrUnknownDE · 2026-04-05T19:41:21+02:00

MrUnknownDE commented

2026-04-05 19:41:21 +02:00

Originally created by @urkosan on 2/19/2025

Hello,
I have a problem with version 1.0.0-beta.14. When I want to add a site under manage sites, I only have "local" as an option. I can't select "newt" or "wireguard".
The thing is, I’m not sure if I have the correct firewall configuration set up. The system is on a VPS where I have to manage the firewall myself, and they don't provide this for me. I’m attaching my iptables configuration. Could the problem be somewhere else?

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:DOCKER-USER - [0:0]

Flush all rules in the INPUT and DOCKER-USER chains

-F INPUT
-F DOCKER-USER

Allow loopback and established connections

-A INPUT -i lo -j ACCEPT
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

Allow Docker bridge network

-A INPUT -s 172.17.0.0/16 -j ACCEPT

Block TCP NULL scan (no flags set)

-A INPUT -p tcp --tcp-flags ALL NONE -j DROP

Block XMAS scan (all flags set)

-A INPUT -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP

Host services (adjust as needed)

-A INPUT -p tcp --dport 64000 -j ACCEPT
-A INPUT -p tcp --dport 64000 -m recent --set --name SSH
-A INPUT -p tcp --dport 64000 -m recent --update --seconds 60 --hitcount 5 --name SSH -j DROP

Docker filtering

-A DOCKER-USER -i ens3 -m conntrack --ctstate RELATED,ESTABLISHED -j RETURN
-A DOCKER-USER -i ens3 -p tcp -m conntrack --ctorigdstport 80 -j RETURN
-A DOCKER-USER -i ens3 -p tcp -m conntrack --ctorigdstport 443 -j RETURN
-A DOCKER-USER -i ens3 -p udp -m conntrack --ctorigdstport 53 -j RETURN
-A DOCKER-USER -i ens3 -p tcp -m conntrack --ctorigdstport 53 -j RETURN
-A DOCKER-USER -i ens3 -p udp -m conntrack --ctorigdstport 51820 -j RETURN
-A DOCKER-USER -i ens3 -j DROP
-A DOCKER-USER -j RETURN

Set default policies

-P INPUT DROP
-P FORWARD DROP
-P OUTPUT ACCEPT

COMMIT

*Originally created by @urkosan on 2/19/2025* Hello, I have a problem with version 1.0.0-beta.14. When I want to add a site under manage sites, I only have "local" as an option. I can't select "newt" or "wireguard". The thing is, I’m not sure if I have the correct firewall configuration set up. The system is on a VPS where I have to manage the firewall myself, and they don't provide this for me. I’m attaching my iptables configuration. Could the problem be somewhere else? *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :DOCKER-USER - [0:0] # Flush all rules in the INPUT and DOCKER-USER chains -F INPUT -F DOCKER-USER # Allow loopback and established connections -A INPUT -i lo -j ACCEPT -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT # Allow Docker bridge network -A INPUT -s 172.17.0.0/16 -j ACCEPT # Block TCP NULL scan (no flags set) -A INPUT -p tcp --tcp-flags ALL NONE -j DROP # Block XMAS scan (all flags set) -A INPUT -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP # Host services (adjust as needed) -A INPUT -p tcp --dport 64000 -j ACCEPT -A INPUT -p tcp --dport 64000 -m recent --set --name SSH -A INPUT -p tcp --dport 64000 -m recent --update --seconds 60 --hitcount 5 --name SSH -j DROP # Docker filtering -A DOCKER-USER -i ens3 -m conntrack --ctstate RELATED,ESTABLISHED -j RETURN -A DOCKER-USER -i ens3 -p tcp -m conntrack --ctorigdstport 80 -j RETURN -A DOCKER-USER -i ens3 -p tcp -m conntrack --ctorigdstport 443 -j RETURN -A DOCKER-USER -i ens3 -p udp -m conntrack --ctorigdstport 53 -j RETURN -A DOCKER-USER -i ens3 -p tcp -m conntrack --ctorigdstport 53 -j RETURN -A DOCKER-USER -i ens3 -p udp -m conntrack --ctorigdstport 51820 -j RETURN -A DOCKER-USER -i ens3 -j DROP -A DOCKER-USER -j RETURN # Set default policies -P INPUT DROP -P FORWARD DROP -P OUTPUT ACCEPT COMMIT

MrUnknownDE closed this issue

2026-04-05 19:41:21 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1769