ACL - External IP. - osTicket Forum

ACL - External IP.

thespringfield

Hello, I have a static external IP address. I notice the ACL feature does not want to let me put an external IP address in this field (System settings and preferences > General settings > ACL). I ensured the external IP address was the one showing to web servers by checking whatismyip(.com). However, each time I try to input my IP and apply the change, the message 'Cowardly refusing to lock out active administrator' is displayed.
Can I just ask, does the ACL only apply to private IP addresses based on the classful network addressing scheme? I notice the examples given in the documentation only give examples for private IP addresses....
Any advice appreciated. Thanks!

ntozier

I haven't played with that feature at all. But I think that it is telling you that if you restrict access to that IP that your current session (admin) would be locked out. [ie. your session is from something other than the IP address that you are allowing].

I'll ask a dev to chime in.

thespringfield

Thanks ntozier!
I decided to have a google search for a solution and modifying the .htaccess file means I can achieve what is required.
What's more, if our external IP ever did have a problem, I can easily go into the web server and change the restriction. If anyone else is interested... this is the web resource I came across that helped:
https://www.concrete5.org/community/forums/chat/restrict-urls-starting-with-abc-to-specific-ips-.htaccess-guru

I do understand the reasoning behind the message. I just don't get why it wasn't 'seeing' my IP address as the one that I was on - which is a static address. I even deliberately attempted over 4 logins with erroneous passwords so it would log the IP address and send me an email about excessive login attempts. It got the right address there... strange. Be interesting in the dev input if available!
cheers.

KevinTheJedi

@thespringfield

You'll need this:
https://github.com/osTicket/osTicket/pull/5089

Cheers.