How can I allow only a single IP address to access Admin login

Hey,

I came across a tutorial somewhere, that  shows you how to block access to your Admin area by only allowing one IP address to access it. I can't seem  to find the tutorial though. If anyone has the link please share it.

Thanx. 

Free the Dolphin...
Quote · 3 Dec 2011

You should password protect the directory instead... unless you access the internet from a static IP address that never changes.

My opinions expressed on this site, in no way represent those of Boonex or Boonex employees.
Quote · 3 Dec 2011

 Yea, that's a good Idea too. Thnx

You should password protect the directory instead... unless you access the internet from a static IP address that never changes.

 

Free the Dolphin...
Quote · 3 Dec 2011

http://blog.arvixe.com/securing-your-dolphin-admin-directory/

BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin
Quote · 3 Dec 2011

 Perfect! Thanx. 

http://blog.arvixe.com/securing-your-dolphin-admin-directory/

 

Free the Dolphin...
Quote · 3 Dec 2011

Ok. It works, but it also blocks my IP as well. And my IP stays the same. 

Free the Dolphin...
Quote · 3 Dec 2011

So the .htaccess file in your administration dir looks like this now (except with your IP instead of 111.22.33.444)?

 

<IfModule mod_rewrite.c>
RewriteEngine off
</IfModule>

Order Deny,Allow
Deny from all
Allow from 111.22.33.444

BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin
Quote · 3 Dec 2011

 Yes sir...
I also just tried the method here:
http://www.dialme.com/m/articles/view/How-to-secure-Boonex-Dolphin-Administration-Panel 

The code is slightly the same but it still blocks me out.  

So the .htaccess file in your administration dir looks like this now (except with your IP instead of 111.22.33.444)?

 

<IfModule mod_rewrite.c>
RewriteEngine off
</IfModule>

Order Deny,Allow
Deny from all
Allow from 111.22.33.444

 

Free the Dolphin...
Quote · 3 Dec 2011

Can you attach the .htaccess to your post here, you can change your IP if don't wany the world seeing it.

BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin
Quote · 3 Dec 2011

 guys if you ever need to share anything that is not really considered public consumable, you should try dropbox. really need and really easy to use. 

Can you attach the .htaccess to your post here, you can change your IP if don't wany the world seeing it.

 

When a GIG is not enough --> Terabyte Dolphin Technical Support - Server Management and Support
Quote · 3 Dec 2011

 There is not extra code besides

<IfModule mod_rewrite.c>
RewriteEngine off
</IfModule>

Order Deny,Allow
Deny from all

Allow from 111.22.33.444 

Can you attach the .htaccess to your post here, you can change your IP if don't wany the world seeing it.

 

Free the Dolphin...
Quote · 3 Dec 2011

I know this is a silly question but you're sure the IP you put beside Allow from is your current one?

BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin
Quote · 3 Dec 2011

 Yes. 

I know this is a silly question but you're sure the IP you put beside Allow from is your current one?

 

Free the Dolphin...
Quote · 5 Dec 2011

try this ....

AuthName "admin area"
AuthType Basic
<Limit GET POST>
order deny,allow
deny from all
allow from x.x.x.x
</Limit>

https://dolphin-techs.com - Skype: Dolphin Techs
Quote · 5 Dec 2011

 Nope.That didn't work either. I suspect cloudflare could be the reason, but not sure.

try this ....

AuthName "admin area"
AuthType Basic
<Limit GET POST>
order deny,allow
deny from all
allow from x.x.x.x
</Limit>

 

Free the Dolphin...
Quote · 5 Dec 2011

I'm stumped, I know nothing about Cloudflare so I can't allow confirm or deny that hypothosis.

BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin
Quote · 5 Dec 2011

If you are using Cloudflare most likely all traffic comes to their network first where they filter out and block the people that don't meet their criteria. The ones that are allowed or let through will most likely appear to come from Cloudflare ip addresses, even you. Basically when you visit your site it goes through Cloudflare first, and then to your site. So you would have an ip from Cloudflare when visiting your site.

In this case it wouldn't be efficient to add the Cloudflare ip to the allowed in your Dolphin 7 administration .htaccess file because you would be allowing yourself, but also everyone else that was allowed through by Cloudflare would also be allowed to access your administration.

Cloudflare does have some modifications, plugins, and even server side modules that can be installed that is supposed to return the visitors real ip address even after they pass through their network. I doubt they have anything specifically for Dolphin. I haven't looked to see if they have any custom mods for a while now.

Another thing about Cloudflare you need to be careful if you have certain advertising programs on your site. Since traffic goes through their network and arrives at your site with the same ip's it can get you in trouble with them. It would appear that people are clicking on ads from the same ip address. You would want to check with them for the modifications that will reveal real ips if you have certain advertising on your site.

You could try the password protect suggestion by Houstonlively. You would just have 2 passwords to remember.

DialMe.com - Your One and Only Source For Boonex Dolphin Tutorials and Resources
Quote · 6 Dec 2011

 Just as I suspected. Well said gameutopia. I'll check with cloudflare to see If I can get the plugins to work with Dolphin. 

The funny thing is that when I check the IP with DeanosTools It shows me my IP, the same one I see when I visit http://www.whatismyip.com/ and not the one Cloudflare probably uses.  

If you are using Cloudflare most likely all traffic comes to their network first where they filter out and block the people that don't meet their criteria. The ones that are allowed or let through will most likely appear to come from Cloudflare ip addresses, even you. Basically when you visit your site it goes through Cloudflare first, and then to your site. So you would have an ip from Cloudflare when visiting your site.

In this case it wouldn't be efficient to add the Cloudflare ip to the allowed in your Dolphin 7 administration .htaccess file because you would be allowing yourself, but also everyone else that was allowed through by Cloudflare would also be allowed to access your administration.

Cloudflare does have some modifications, plugins, and even server side modules that can be installed that is supposed to return the visitors real ip address even after they pass through their network. I doubt they have anything specifically for Dolphin. I haven't looked to see if they have any custom mods for a while now.

Another thing about Cloudflare you need to be careful if you have certain advertising programs on your site. Since traffic goes through their network and arrives at your site with the same ip's it can get you in trouble with them. It would appear that people are clicking on ads from the same ip address. You would want to check with them for the modifications that will reveal real ips if you have certain advertising on your site.

You could try the password protect suggestion by Houstonlively. You would just have 2 passwords to remember.

 

Free the Dolphin...
Quote · 6 Dec 2011

The best way to secure the admin area is open your administration folder and edit your .htaccess file as fallows. You must have a static ip address in order to do so replace the x with your IP octets. Everyone else should get page not found when going to your domain/administration.

 

order deny,allow

allow from xxx.xxx.xxx.xxx

deny from all

#end of file.

Quote · 1 Apr 2018
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.