Block Direct IP Access to Blesta using apache

[timnboys]

well I didn't think this would work so easy but I have to say it does:

.htaccess modification:

#Deny Direct IP Access
RewriteCond %{REMOTE_ADDR} ^127\.0\.0\.1 [OR]
RewriteCond %{REMOTE_ADDR} ^127\.0\.0\.2
RewriteRule ^ http://%{HTTP_HOST}/403.html [R=403,NE,L]

^ Do note to replace the 127.0.0.1 & 127.0.0.2 with your server actual ip addresses.

also the 403 page I have on my own website https://portal.cubedata.net/403.html can be sourced here on github: 

https://github.com/AndiDittrich/HttpErrorPages/blob/master/dist/HTTP403.html

 

[turner2f]

Thanks for sharing.

Can you or someone please describe in what particular "real-world" scenario(s) would we use this ?

Look forward to someone's reply.

Thanks in advance.

[Paul]

5 minutes ago, turner2f said:

Thanks for sharing.

Can you or someone please describe in what particular "real-world" scenario(s) would we use this ?

Look forward to someone's reply.

Thanks in advance.

I don't know how useful what the OP posted is, but it's often useful to block the entire world and allow only your IP address. This way you can test changes without the risk of someone else accessing the installation.

 

order deny,allow
deny from all
allow from <your ip> 

 

[turner2f]

OK.

So this has nothing to do with preventing hackers ?

This is only useful for testing and maintenance ?

 

[Paul]

5 minutes ago, turner2f said:

OK.

So this has nothing to do with preventing hackers ?

This is only useful for testing and maintenance ?

That's the only use case I can think of.

[turner2f]

We have at least one Department that is available to the public  ( for those that are not registered ).

Just curious, can this  be used in reverse to block SOME IP addresses ?

Would be for Brute Force or Spammers to the ticket system.

If so, how ?

[Paul]

7 minutes ago, turner2f said:

We have at least one Department that is available to the public  ( for those that are not registered ).

Just curious, can this  be used in reverse to block SOME IP addresses ?

Would be for Brute Force or Spammers to the ticket system.

If so, how ?

See https://htaccessbook.com/block-ip-address/ for more information on these kinds of rules, for blocking specific IPs while keeping access otherwise globally open.

[turner2f]

Thanks.