Metriche repository
- Star
- (2920 stelle)
- Metriche merge PR
- (Metriche PR in attesa)
Descrizione
I found many unsolicited access attemps even in the NC admin interface log complaining about "secure domain" failures. These were requests using the external IP as domain.
Instead of having apache listening and NC block these request, maybe apached could be configured right away to only answer requests using IPs (instead of dns domain names) if they are local IPs.
Here is an example restricting request based on the source IP, which is another thing, but maybe the same ranges can be used to bypass a "apache secure domains configuration"
https://salsa.debian.org/freedombox-team/plinth/commit/21d6174ba052e22926f05b0a6806e3fa7f83c8f1
This is like in this question (however, the actual config for the solution there is at the duplicate question): https://serverfault.com/questions/786809/block-direct-ip-connections-to-apache-web-server