Author Topic: How to disable web admin from Internet  (Read 1457 times)

curiousprogrammer

  • Zen Apprentice
  • *
  • Posts: 23
  • Karma: +1/-0
    • View Profile
How to disable web admin from Internet
« on: May 10, 2015, 05:24:22 pm »
Hi, if I want to provide Outlook Anywhere service to laptops outside the corporate network (ie traveling on the road), I need to permit ports 80 and 443 according to the following wiki page.
https://wiki.zentyal.org/wiki/En/4.1/OpenChange_%28Microsoft%28R%29_Exchange_Server_protocol_implementation%29#Configuring_the_OpenChange_server_in_Zentyal

Will this somehow permit someone potentially logging into the web admin panel also.  While trying to access https://<zentyal.mydomain.com>:443 it's not loading the web admin panel it does nevertheless loads up the Apache test page.

Can I disable the ability to login when the request is coming from an external network (ie Internet)?

robb

  • Guest
Re: How to disable web admin from Internet
« Reply #1 on: May 12, 2015, 09:50:09 am »
On what port do you have the webadmin page listening?
You can only access the webadmin page from outside if you have allowed administration in your firewall (external to zentyal)
If you have administration on the same port as webmail, and allowed that port from external to zentyal, you can reach administration from the internet.

The sollution is to change the port for the administration page and disallow administration to be accessed from external to Zentyal. If you need to use the admin page from the internet, you can use a VPN to establish a secure connection inside the LAN and use the webadmin from an inside IP address.