47.4. Restricting Access to Usermin

By default, Usermin will accept connections from any IP address. Even though it is password-protected, you should limit access to only legitimate client systems, if possible, so that an attacker from outside your network cannot even attempt to log in. To do this, follow these steps:

1.
Click on IP Access Control on the module's main page to bring up the Access Control form.

2.
Select Only allow from listed addresses and enter a list of hostnames, IP addresses, and networks into the adjacent text box. Networks should be entered with a netmask like 192.168.1.0/255.255.255.0. You can allow access from an entire DNS domain by entering something like *.example.com, but be aware that that is not totally secure as an attacker can fake reverse DNS results.

3.
Usermin will normally resolve any hostnames that you enter only once when it first starts up. To change this, check the Resolve hostnames on every request box and it will convert hostnames to IP addresses for comparison on every request. This can be useful if the system on which you are running a browser is frequently changing IP addresses but is able to update a DNS record to match. This can happen on a network using DHCP or if you are connected to an ISP that dynamically assigns addresses.

4.
To have Usermin check the TCP-wrappers configuration files /etc/hosts.allow and /etc/hosts.deny when deciding whether to allow a client, turn on the Also check TCP-wrappers hosts.allow and hosts.deny files option. The service name to use when editing those files is usermin.

5.
Hit the Save button to activate the new client address restrictions.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
18.118.37.120