www.zeroshell.org Forum Index www.zeroshell.org
Linux Distribution for server and embedded devices
 
 SearchSearch  RegisterRegister  UsergroupsUsergroups 
 ProfileProfile  Log inLog in  Log in to check your private messagesPrivate Message 

Web interface unexpectedly visible from Internet side

 
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> Signal a BUG
View previous topic :: View next topic  
Author Message
PatrickB



Joined: 03 Nov 2012
Posts: 50

PostPosted: Thu Mar 03, 2016 1:54 pm    Post subject: Web interface unexpectedly visible from Internet side Reply with quote

Hello.

I hadn't noticed that before so I cannot tell how recent it is...

In System/Web it is possible to restrict the access to the Web management interface, then of course I had restricted it to the internal bridge only.

But from a computer connected WAN side I still could see it and even login !

I also tried with the access restricted to the explicit internal subnet/24 only, so excluding the WAN side subnet, idem !

Actually it is the checkbox named "Auto-authorize the LAN" that makes no difference and auto-authorizes all the subnets around Shocked

By unchecking it, the interfaces or subnets explicitly listed do access but the others get no answer.

I don't know if this is really a bug or rather a feature, but at least it is very counter-intuitive then dangerous.

Is that checkbox useful, considering how simple it is to explicitly authorize interfaces or IP ranges ?

Best regards.
Back to top
View user's profile Send private message
redfive



Joined: 27 Aug 2009
Posts: 232

PostPosted: Thu Mar 03, 2016 8:23 pm    Post subject: Reply with quote

After some changes, take a look at the web management rules,
iptables -nvL SYS_HTTPS
Cheers,
jonatha
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> Signal a BUG All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group