Page 1 of 1
Feature Request: SSH fine grained IP access
Posted: 30 Jun 2021, 19:43
by 1dimitri
Hello
When enabling SSH, there is an option to restrict the access to the local network
It could be useful to add a way to enter one or more 1IP addresses outside the local network range.
Goal: Allowing remote maintenance without opening to all the internet.
Re: Feature Request: SSH fine grained IP access
Posted: 30 Jun 2021, 23:39
by TMroy
firewall can help to do this.
Re: Feature Request: SSH fine grained IP access
Posted: 01 Jul 2021, 17:48
by 1dimitri
TMroy wrote: ↑30 Jun 2021, 23:39
firewall can help to do this.
Yes, fully agree on the technical side.
On the UX/UI side, however it is unclear which setting will take over precedence in the iptables conf when playing with the settings at 2 different locations.
E.g. with the current TOS version, if I check the "only local network" for SSH, there is no rule displayed in the firewall control panel part.
Re: Feature Request: SSH fine grained IP access
Posted: 13 Jul 2021, 13:58
by TMroy
"Allow only within local network" means the accessing user IP need to be in the same segment with your tnas IP, and this feature only valid for SSH access. So you can set your firewall rules for access from outside. They do not conflict with each other.