DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.
  • Search Forums
    Advanced Search
Prev
Next
Forums Using DNN Platform Administration and Configuration

IP Filter (IPFilter) Proper Function?

 4 Replies
 2 Subscribed to this topic
 40 Subscribed to this forum
Sort:
Author
Messages
Clifton Foster
New Around Here
Posts: 2
New Around Here
7/14/2020 4:23 PM

The IP Filter setting seems to only block admins/lhosts from IPs that are set to be blocked. Standard users can still login from the blocked IPs. Is this normal behavior for DNN EVOQ? 

So, we supposedly have only internal IP addresses allowed to login (10.0.0.0/8) and when I do try to login to our public website from the Internet using my account (a Super User account) I am blocked, "You cannot login to the site from this IP address." This is what I want and what I would expect. However, a standard user can login to our website from the Internet (public facing IP) and still be able to modify content. What's wrong with this picture? Shouldn't an IP filter block not only admins but all users? Am I missing a setting somewhere? I cannot find this topic in the Manuals and a search for it in the forums doesn't bring anything up. (I cannot search for 'IP', probably because it is too short a word)

Our setup:

  • EVOQ CONTENT
  • v. 09.04.04 (5)
  • 4.8
Michael Tobisch
Veteran Member
Posts: 1182
Veteran Member
MVP
MVP
You're an MVP!
7/15/2020 2:32 AM

Clifton,

I never used that because I block things on a WAF, so there is no need for me to use that feature. Anyway, I would understand it in the same way as you described.

As you are using Evoq you pay for support, so I would go and ask there as well. This here is the forum for the DNN Platform, which might be a bit different at some points.

If you feel it's a bug, you could also create an issue here: https://github.com/dnnsof.../Dnn.Platform/issues - but keep in mind that this is the Platform, I am not sure when these changes run into Evoq.

You could also implement IP restrictions in IIS, see here: https://docs.microsoft.co...address-restrictions

Happy DNNing!
Michael

Michael Tobisch
DNN★MVP

DNN Connect
1
liked by Members
Tycho de Waard (SU)
Veteran Member
Posts: 838
Veteran Member
3 Helpful Replier
Helpful Replier
Thanks for being such a helpful replier!
New Poster
New Poster
Congrats on posting!
7/15/2020 3:43 AM
Hi Clifton,

The IP filter does what it is designed to do which is restricting Admin access.
There are a lot of scenarios that can be supported by roles. But for handing out roles, one needs to be able to login...

So, blocking the ability to login is handled mostly on IIS level or WAF or Plesk or...
Clifton Foster
New Around Here
Posts: 2
New Around Here
7/15/2020 10:56 AM

Thank you, Tycho and Michael. That's what I needed to know.

Michael, the link in your post is malformed. Here is the full link: https://docs.microsoft.co...address-restrictions 

Michael Tobisch
Veteran Member
Posts: 1182
Veteran Member
MVP
MVP
You're an MVP!
7/16/2020 2:28 AM
Clifton,

thanks for telling me - corrected ;-)

Happy DNNing!
Michael

Michael Tobisch
DNN★MVP

DNN Connect
0
liked by Members

These Forums are for the discussion of the open source CMS DNN platform and ecosystem.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy. 
  2. No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
  3. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  4. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  5. No Flaming or Trolling.
  6. No Profanity, Racism, or Prejudice.
  7. Site Moderators have the final word on approving / removing a thread or post or comment.
  8. English language posting only, please.

Would you like to help us?

Awesome! Simply post in the forums using the link below and we'll get you started.

Get Involved