Open ra-at-diladele-com opened 1 year ago
We need to somehow run the Captive Portal UI on different port maybe?
Add the following to /etc/apache2/sites-enabled/websafety.conf. It would restrict access to any location other than /portal
to all IP addresses but 1.2.3.4 (your admin workstation IP).
# only allow connections to *not* /portal for the specific IP
<Location ~ "^/(?!portal)">
Order deny,allow
Deny from all
Allow from 1.2.3.4
</Location>
In future a good idea is to separate the Captive Portal UI and Admin UI - this must be done for the Cloud Proxy project to be able to have Captive Portal too.
The captive portal functionality now lives in /portal url in the same Admin UI of Web Safety. If we deploy proxy in Microsoft Azure we typically would like to limit the incoming connections to Admin UI to public IP of the admin workstation.
But if we do that and later enable Captive Portal - access to Captive Portal will also be blocked by the firewall.