access site by ip

inguide

Hello
If you connect to the IP of the server where the panel is installed, you will be connected to the default site.

Please tell me how to prevent access by IP.

thank you

aaPanel_Kern

inguide
Is it this one?
https://www.aapanel.com/forum/d/12952-i-have-a-lot-of-attacks-what-should-i-do

inguide

aaPanel_Kern

My server is Apache. Any tips please?

thank you

aaP_hareeshnarayan1982

inguide Did you tried IP in the place of website domain?

aaPanel_Kern

inguide
/www/server/panel/vhost/apache/0.default.conf
192.168.247.138 Change to your server IP

<virtualhost *:80>
    ServerName 192.168.247.138
    <Location />
        Order Allow,Deny
        Deny from all
    </Location>
</virtualhost>

aaP_1specific

aaPanel_Kern
Thank you for your response. However, could you please provide an example using this configuration?:

<VirtualHost *:80>
    ServerAdmin webmaster@example.com
    DocumentRoot "/www/server/apache/htdocs"
    ServerName bt.default.com
    <Directory "/www/server/apache/htdocs">
        SetOutputFilter DEFLATE
        Options FollowSymLinks
        AllowOverride All
        Order allow,deny
        Allow from all
        DirectoryIndex index.html
    </Directory>
</VirtualHost>

Where exactly should I insert the code you provided?

Additionally, could you advise how to restrict access by IP if a Docker container is running on port 12345, a domain is configured, and proxying is set up from port 12345 to port 80? How can I ensure access is only allowed via the domain?
Thank you!

aaPanel_Kern

Hello, it is recommended that you use the IP of the server to build a website. And is it possible to configure prohibition?

aaP_1specific

aaPanel_Kern
That's correct, I am using the server's IP to create a website. My question was that I don't fully understand how to integrate your code into the default Apache configuration. That's why I asked you to provide an example.

aaPanel_Kern

Hello, you can set it as a default website

aaP_1specific

aaPanel_Kern
But how will this help me block access to a website running in Docker on port 12345? I can still open it via 111.222.33.4:12345.
I also tried using the firewall (security settings) to block access to port 12345 for all IPs, but that didn’t work either

aaPanel_Kern

Hello, you can add the following configuration to .htacces in the website directory and replace yourdomain.com with your own domain name

RewriteEngine On

RewriteCond %{HTTP_HOST} !^yourdomain\.com$ [NC]
RewriteCond %{HTTP_HOST} !^www\.yourdomain\.com$ [NC]

# 403 Forbidden
RewriteRule ^ - [F]

aaP_1specific