Limit access to admin page: www.mywebsite/administrator
-
Good morning,
How to limit access (except some Mac address) and protect the admin page of my website with pfsense
Thanks -
@tina You can block/allow access to the web server port.
A URL would require something like haproxy because the firewall can’t see that.
You could also connect via VPN and/or limit access on the web server itself.
-
@SteveITS said in Limit access to admin page: www.mywebsite/administrator:
You could also connect via VPN and/or limit access on the web server itself.
Yeah, I restricted access to the admin VPN tunnel pool in the web server settings and routed the website over the VPN.
However, this presumes that you have a static WAN address or use the remote DNS on the VPN client with a host override for the website. -
@tina where is the site hosted? On the public internet or behind pfsense. If behind pfsense is the site to be viewed by the public? The only way you can filter the /admin would be with a reverse proxy.
If this is hosted on the public internet, pfsense really has nothing to do with that, sure you could proxy it so your users behind pfsense couldn't go to /admin - but anyone else on the internet could. etc..
Prob need a bit more detail to figure out if what you can be done, and if so how, etc.
