How to restrict Foreman Interface Access

Support
1

How to restrict the Foreman Interface Access to specific IP Address or Subnet ?

Hey There,

A first time user of Foreman here.
I have foreman-2.2.3 up and running on local VM.
I’m looking for a option to restrict the Foreman UI access & allow only from specific IPs.

Thanks in Advance.

2

IPtables (or FirewallD) are your friends here. As far as I know there are no specific settings in Foreman that restruct access, but the Host-based firewall will fix that for you :slight_smile:

3 Likes
3

Just keep in mind, managed machines or at least all deployed smart proxies also typically needs to access the Foreman API, which is the same app and therefore the same port.

1 Like
4

True, a solution to restrict ‘end-users’ talking to Foreman could be to put the server itself in a management VLAN, block all ‘end-user’ VLANs and put proxies in those networks (make sure to allow access from/to those systems :wink: )

This will effectively shield the management console as the smartproxies don’t have that functionality

2 Likes