Only access to admin UI from local network

Community Support
1

Hi,

I have installed Bunkerweb from the simple script (full install), and I would like to find the safest way to prevent access to the admin UI from unwanted (mostly external) sources, as we publish some ‘services’/websites on the Internet. Basically, I just want to allow some local IPs/networks to access this UI.

I have allowed direct access to the admin UI through port 7000 by adding “UI_LISTEN_ADDR=0.0.0.0” in /etc/bunkerweb/ui.env.

I tried to delete the default Bunker Web ‘service’ with redirects to the Admin UI but it seems it is not allowed.

I also tried to edit this ‘service’ and add local network IP to the whitelist section of this service, but I still can access to the admin UI through this service.

How can I achieve this please ?

Thank you for your help.

2

I tried the greylist instead of the whitelist and now it seems that “all” non greylisted IPs are blocked. That’s what I want but I don’t understand why it is not working with the whitelist.

3

The Whitelist only allows to bypass the security checks and does not block other IPs, the greylist blocks requests exept for those greylisted.
There is a nice diagram how the different parts work

4

Thank you for your answer and the link DrivingLama !