Restrict Administration Console

Openfire Openfire Support
1

Hi,

someone knows how can I restrict IP’'s that open Administration Console?

Thanks

2

Hi Matheus,

Unfortunately Wildfire doesn’'t have the capability to restrict which ip addressess can access the Admin Console, but you could certainly use a firewall instead.

Hope that helps,

Ryan

3

I suspected that… So I’'m working on firewall rules to restrict IP access to Admin Console.

Thanks anyway!

4

Hi,

you could bind it to one IP address by editing wildfire.xml. Maybe this meets your needs.

LG

/code

5

Thanks but this solution doesn’'t fit my needs…

I think that new versions of Wilfire Server could have a implementation of access lists to admin console.

Anyway, set up some firewall rules for that wasn’'t too complicated.

Hugs!

6

Glad you got the issue fixed. I’'m tempted to say that this type of setting should be handled at the firewall. However, if a lot of people think it would be useful, we can definitely reconsider.

Regards,

Matt

7

I use Apache as url=http://httpd.apache.org/docs/2.0/mod/mod_proxy.html#examplesreverse proxy[/url] for wildfire administration console.

Wildfire administration console is listening on 127.0.0.1 and access from “outer space” is done by Apache reverse proxy with url=http://httpd.apache.org/docs/2.0/mod/mod_proxy.html#accessIP control[/url].

8

I´d like to be able to restrict ip acess to the console, a log of acesses and some kind of protection against hammering, like ban an ip that tried to access for 3 times without sucess

Sure you could do all of this in firewall…but it would be much more simple and user friendly.

Thanks,

Jcorreia

9

Matt,

I think that this implementation would be wonderful, specially to newbie users that doesn’'t have knowledge enough to configure a firewall or a apache implementation like TimeLord does (an excelente solution by the way).

Hugs