Restrict admin GUI to certain IPs

When you change use b httpd allow IP, it should modify the internal database and the httpd.conf. You can view the configuration using 'b db list'. The key is called service.httpd.allow:

 

 

db service.httpd.allow {

 

"10.11.12.13/32"

 

}

 

 

You should also see the httpd.conf modified:

 

 

 

 

Controls who can get stuff from this server.

 

 

Order Deny,Allow

 

Allow from 127 10.11.12.13/32/32

 

 

 

 

 

 

However, it doesn't look like there is a deny from clause which would actually block access from any other ip/range.

 

 

I would have expected it to look like this:

 

 

 

 

Controls who can get stuff from this server.

 

 

Order Deny,Allow

 

Allow from 127 192.168.99.210/32

 

deny from all

 

 

 

 

 

Anyone else know the story on this?

 

 

Aaron