Restrict WebGUI access to three particlar IP addresses..??

Status
Not open for further replies.

spinjector

Cadet
Joined
Feb 13, 2013
Messages
4
<n00bquestion>

I know this has probably been asked before, but I searched the forums with a variety of keywords and did not find an answer.

How do I restrict WebGUI access to only certain IP addresses, both on the LAN and WAN...??

I did google this and found no answer there either, but I did manage to discover that FreeNAS uses a web server called Lighttpd, and /etc/lighttpd/lighttpd.conf is what I want to modify, but I'm having trouble understanding the $HTTP["remoteip"] syntax ...AND... I'm not eve sure this is the way to do it. I couldn't find a "Auxiliary Parameters" box like in the FTP service advanced settings.

Any help/suggestions would be appreciated.

Thanks.

</n00bquestion>
 

cyberjock

Inactive Account
Joined
Mar 25, 2012
Messages
19,526
I don't think you have that kind of control on FreeNAS itself. You could control via your router(firewall) if it has that feature, but I'm not familiar with any feature that will let you block the WebGUI. It would be very bad to block out all IPs from the WebGUI too and I don't see a menu option to recover from that scenario locally except a factory reset.
 

spinjector

Cadet
Joined
Feb 13, 2013
Messages
4
Well, whatever I do, I want to stay within the confines of the settings available through the WebGUI so later on I'm not scratching my head trying to remember wth I did.

If I add a 2nd NIC attached inside the router on a non-routable IP, will that NIC show up in the WebGUI binding drop-down? And if I set it for that 2nd IP, will the WebGUI then only be accessible on that IP from inside the LAN..?
 

ProtoSD

MVP
Joined
Jul 1, 2011
Messages
3,348
Usually the GUI binds to the IP of the first NIC with a default gateway configured if I remember correctly. And yes, the 2nd NIC will show up in the drop down. You might also consider using a VLAN(s) for what you're trying to do, which can also be configured from the GUI if you've done your homework and understand how to setup and use them.
 
Status
Not open for further replies.
Top