Feature Request: SSH fine grained IP access

[1dimitri]

Hello
When enabling SSH, there is an option to restrict the access to the local network

It could be useful to add a way to enter one or more 1IP addresses outside the local network range.

Goal: Allowing remote maintenance without opening to all the internet.

[TMroy]

firewall can help to do this.

[1dimitri]

firewall can help to do this.

Yes, fully agree on the technical side.
On the UX/UI side, however it is unclear which setting will take over precedence in the iptables conf when playing with the settings at 2 different locations.
E.g. with the current TOS version, if I check the "only local network" for SSH, there is no rule displayed in the firewall control panel part.

[TMroy]

"Allow only within local network" means the accessing user IP need to be in the same segment with your tnas IP, and this feature only valid for SSH access. So you can set your firewall rules for access from outside. They do not conflict with each other.