DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.
Prev
Next

IP Filter (IPFilter) Proper Function?

Forums > Administration and Configuration
Sort:
You are not authorized to post a reply.





Clifton Foster

New Around Here



Posts:2
New Around Here




7/14/2020 3:23 PM

    The IP Filter setting seems to only block admins/lhosts from IPs that are set to be blocked. Standard users can still login from the blocked IPs. Is this normal behavior for DNN EVOQ? 

    So, we supposedly have only internal IP addresses allowed to login (10.0.0.0/8) and when I do try to login to our public website from the Internet using my account (a Super User account) I am blocked, "You cannot login to the site from this IP address." This is what I want and what I would expect. However, a standard user can login to our website from the Internet (public facing IP) and still be able to modify content. What's wrong with this picture? Shouldn't an IP filter block not only admins but all users? Am I missing a setting somewhere? I cannot find this topic in the Manuals and a search for it in the forums doesn't bring anything up. (I cannot search for 'IP', probably because it is too short a word)

    Our setup:

    • EVOQ CONTENT
    • v. 09.04.04 (5)
    • 4.8





    Michael Tobisch

    Veteran Member



    Posts:1125
    Veteran Member




    7/15/2020 1:32 AM

      Clifton,

      I never used that because I block things on a WAF, so there is no need for me to use that feature. Anyway, I would understand it in the same way as you described.

      As you are using Evoq you pay for support, so I would go and ask there as well. This here is the forum for the DNN Platform, which might be a bit different at some points.

      If you feel it's a bug, you could also create an issue here: https://github.com/dnnsof.../Dnn.Platform/issues - but keep in mind that this is the Platform, I am not sure when these changes run into Evoq.

      You could also implement IP restrictions in IIS, see here: https://docs.microsoft.co...address-restrictions

      Happy DNNing!
      Michael

      Michael Tobisch
      DNN★MVP

      dnnWerk Austria
      DNN Connect





      Tycho de Waard (SU)

      Veteran Member



      Posts:726
      Veteran Member




      7/15/2020 2:43 AM
        Hi Clifton,

        The IP filter does what it is designed to do which is restricting Admin access.
        There are a lot of scenarios that can be supported by roles. But for handing out roles, one needs to be able to login...

        So, blocking the ability to login is handled mostly on IIS level or WAF or Plesk or...
        Tjep's digital agencyRegards,
        Tycho de Waard

        Tjep's digital agency
        We just love DNN
        https://www.tjeps.com





        Clifton Foster

        New Around Here



        Posts:2
        New Around Here




        7/15/2020 9:56 AM

          Thank you, Tycho and Michael. That's what I needed to know.

          Michael, the link in your post is malformed. Here is the full link: https://docs.microsoft.co...s-restrictions 






          Michael Tobisch

          Veteran Member



          Posts:1125
          Veteran Member




          7/16/2020 1:28 AM
            Clifton,

            thanks for telling me - corrected ;-)

            Happy DNNing!
            Michael

            Michael Tobisch
            DNN★MVP

            dnnWerk Austria
            DNN Connect
            You are not authorized to post a reply.

            These Forums are dedicated to the discussion of DNN Platform.

            For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

            1. If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy. 
            2. No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
            3. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
            4. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
            5. No Flaming or Trolling.
            6. No Profanity, Racism, or Prejudice.
            7. Site Moderators have the final word on approving / removing a thread or post or comment.
            8. English language posting only, please.

            Would you like to help us?

            Awesome! Simply post in the forums using the link below and we'll get you started.

            Get Involved