Limit logins by IP

Permalink
I want to set it up so some logins can only log in from certain IPs, for example, only LAN IPs.

Namely because I want the website to be only editable on the LAN, and I think this might be the best way to do it, but I'm not yet finding a way to configure this constraint.

Please advise.

BloodyIron
 
BloodyIron replied on at Permalink Reply
BloodyIron
So far the only way that this _MIGHT_ be achievable is using fail2ban and monitoring login accounts an then comparing used IP to a list, and temp banning anyone trying to log into an account from the wrong IP. This seems pretty gritty to administrate.
tallacman replied on at Permalink Reply
tallacman
https://www.concrete5.org/marketplace/addons/restrict-login
perhaps?
BloodyIron replied on at Permalink Reply
BloodyIron
The problem is, based on the description, is that it is a full ban.

Let me flesh this out a bit more. There are some users that I want to be able to login from any IP, and then there are some users I want to be able to login only from an allowed range.

The plugin you linked to (which I found earlier in my search) makes it so blocked IPs can't login at all, no matter the account.

So per-group or per-user (or both would be nice) is the kind of scope I want to do IP limitations on.

Make sense? :)
BloodyIron replied on at Permalink Reply
BloodyIron
Bump