bunkerweb

bunkerweb copied to clipboard

What's needed and why ? We should be able to restrict access only from a set of IP/network. At the moment we can do a combination of WHITELIST + BLACKLIST but if IP is allowed then all security features are disabled. We should be able to have the same behavior but keep the security features.

A practical example is to add another layer of security to the web UI in addition to the existing ones.

Implementations ideas (optional) Add a core plugin allowed or greylist that will implement the *_IP, *_RDNS, ... settings just like the blacklist and whitelist ones.