nextcloud/nextcloudpi

deny access to apache using public IP

開放

#408 建立於 2018年2月12日

 (20 則留言) (0 個反應) (0 位負責人)Shell (320 個分叉)auto 404
enhancementgood first issuehelp wanted

倉庫指標

星標
 (2,920 顆星)
PR 合併指標
 (PR 指標待抓取)

描述

I found many unsolicited access attemps even in the NC admin interface log complaining about "secure domain" failures. These were requests using the external IP as domain.

Instead of having apache listening and NC block these request, maybe apached could be configured right away to only answer requests using IPs (instead of dns domain names) if they are local IPs.

Here is an example restricting request based on the source IP, which is another thing, but maybe the same ranges can be used to bypass a "apache secure domains configuration" https://salsa.debian.org/freedombox-team/plinth/commit/21d6174ba052e22926f05b0a6806e3fa7f83c8f1

This is like in this question (however, the actual config for the solution there is at the duplicate question): https://serverfault.com/questions/786809/block-direct-ip-connections-to-apache-web-server

貢獻者指南