Implementing email authentication solutions like DMARC with an enforced policy is proven to drastically minimize the chances of BEC. You can learn about DMARC here: https://powerdmarc.com. Source: almost 3 years ago

Stop attacks with DMARC and protect your email service free from email spoofing Phishing PowerDMARC tool. Monitoring SPF DKIM, DMARC Record, BIMI MTA-STS TLS-RPT. Visit the website and Get a free real time email authentication assessment for your organization. Source: about 3 years ago

You can try https://powerdmarc.com it starts from 8 usd a month, you get the DMARC analyzer along with MTA-STS and TLS-RPT. Source: over 3 years ago

In this post we will discuss how to use efficiently IPSET with CSF (ConfigServer Security & Firewall) Firewall. Unfortunately, I will not discuss what CSF is because it's not within the scope, but you can read about it here. - Source: dev.to / 4 months ago

At the very least, the free ConfigServer CSF is a more robust firewall addon that blocks brute force attempts, mod security failures, and so on. It's relatively easy to install, has a ton of options, and it's easy to whitelist IPs if your users have trouble. The same dev has a virus & malware scanner that's available as a one-time purchase. Source: about 1 year ago

Use CSF (linux only) to cut down some basic attacks https://configserver.com/configserver-security-and-firewall/. Source: over 1 year ago

Seems like a GUI wrapper (other than the graphs) so may not solve the OPs issue of things like Docker complicating the firewall. Source: over 1 year ago

You should not have ANY ports on the home network open to the outside. NONE. If you insist on running a public-facing service at home, use a VPS with an ARGO tunnel. No SQL ports should be open to anywhere, not even on a private net. Use SSH tunnels to access if needed. As long as everything is closed to the outside, a consumer-grade firewall, along with every node on the home network protected by Configserver... Source: over 2 years ago