Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Allow incoming connection to a URL based on IP address

    Scheduled Pinned Locked Moved Firewalling
    2 Posts 2 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      gordc
      last edited by

      We would like to able to filter incoming connections based on the URL.  For example
      http://domain.com/site1
      http://domain.com/site2

      We would like to be able to filter at the firewall so that site1 is open to anyone but site2 will only allow access for a particular ip address.  We don't want to do this at the web server.

      Thanks Gord.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        You would need a reverse type proxy for this sort of filtering.  Firewall has no way of looking at that traffic it just sees a connection from src IP:port to dst IP:port , so you either need to change the the dest IP or the port and then you could filter on src IP.

        You could look at the squid3 packare or the proxy server modsecurity package - both state they can be used as reverse proxy.  This should allow you to put in such filtering.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.