GFDRR / geonode

GFDRR Lab GeoNode
https://www.geonode-gfdrrlab.org
GNU General Public License v3.0
2 stars 3 forks source link

Options to access geonode server #60

Closed stufraser1 closed 7 years ago

stufraser1 commented 7 years ago

IP ranges have proven to be unreliable (have already needed to open from 1 IP address, to a range of IPs to a wider range of IPs in the case of automatically changing IPs). Is there a suitable alternative that will facilitate access from the WB - use of particular SSH keys, for example? @vdeparday @ErikKBethke pls add any specific requirements for WB access

vdeparday commented 7 years ago

@fvanderbiest we really need to be able to administrate from the WB network. Could we put this issue as a higher priority? Could you suggest alternative to whitelisting IP? Thank you.

Vampouille commented 7 years ago

we really need to be able to administrate from the WB network.

It seems that ip range are not wide enough to always match your ip address so we will open ssh service to all ip addresses. @saimonn can you remove ip filter on gfdrr prod server ?

saimonn commented 7 years ago

I just opened the ports tcp/2222 & 2223 without IP filtering. I kept the IP range filters on the tcp/5432 port though.

fvanderbiest commented 7 years ago

Closing. Please reopen if required.