diff --git a/rootfs/etc/firewall.conf b/rootfs/etc/firewall.conf
new file mode 100644
index 0000000..885e30e
--- /dev/null
+++ b/rootfs/etc/firewall.conf
@@ -0,0 +1,14 @@
+# SSH Port
+SSH_PORT="22"
+
+# Länder blockieren
+GEOIP_BLOCK="kp cn ru"
+
+# ASN blockieren
+ASN_BLOCK="AS4134 AS9808"
+
+# Statische Whitelist
+WHITELIST_IPS=""
+
+# DynDNS Hosts
+WHITELIST_HOSTS="vpnafgeissler.selfhost.co""
\ No newline at end of file