HNGlance

Top Best New Show

Limit WordPress admin access by IP address in Nginx

https://jeffsteinport.com/limit-wordpress-admin-access-by-ip-address-in-nginx/

by pwned1 • 7 years ago

1 1 7 years ago

JE

jeffsteinport.com

Related Stories

Loading related stories...

Comments

1

ggm• 7 years ago

I don't think this should NOT be done, but I do worry people don't believe source-address spoofing is a thing. Since admin functions usually demand 2-way dataflow in TCP which means a SYN-ACK dance, it's possible the risk is lower here but if it turns out you can send data one-way and effect change in the system, this might not be enough to protect a system.

What do wiser minds say? Is this actually adequate? Isn't it better to ship with some kind of 2FA for admin?

Source preview

jeffsteinport.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms