Should 'Allow only specified IP address' apply on internal interface?

[penguin02007]

RT-N66U_3.0.0.4
Firmware:378.56_2

When configuring 'Allow only specified IP address', it appears to applying on both internal and external interfaces. Should this option be apply on external only?

http://www.snbforums.com/threads/administration-system-only-allow-specific-ip.11352/

http://www.manualslib.com/manual/438881/Asus-Rt-Ac66u.html?page=84

 

[RMerlin]

RT-N66U_3.0.0.4
Firmware:378.56_2

When configuring 'Allow only specified IP address', it appears to applying on both internal and external interfaces. Should this option be apply on external only?

http://www.snbforums.com/threads/administration-system-only-allow-specific-ip.11352/

http://www.manualslib.com/manual/438881/Asus-Rt-Ac66u.html?page=84

No, it's global.

 

[penguin02007]

Should there be a footnote if this is the case? Typically user enter a public address and assume LAN is always trusted.

I can perhaps update the documentation so users do not accidentally cut their legs off?

https://github.com/RMerl/asuswrt-merlin/wiki

 

[RMerlin]

Should there be a footnote if this is the case? Typically user enter a public address and assume LAN is always trusted.

I can perhaps update the documentation so users do not accidentally cut their legs off?

https://github.com/RMerl/asuswrt-merlin/wiki

That feature is part of Asus's firmware, that's why there's no specific documentation for it on my side.

 

[penguin02007]

Thanks!

What is the proper channel to ASUS to request this as described below? I am curious if anyone will use this feature, with the magic number 4 and no subnet supported.

>What I want is
>- Web UI only accessible from a specific IP address from the WAN
>- Web UI accessible from any IP on the LAN
>
>Having to specify IP addresses within the LAN doesn't make sense, because those IP addresses are assigned >by DHCP and change. Perhaps if I could specify a range of IP addresses (192.168.1.1 - .255)

 

[RMerlin]

Thanks!

What is the proper channel to ASUS to request this as described below? I am curious if anyone will use this feature, with the magic number 4 and no subnet supported.

>What I want is
>- Web UI only accessible from a specific IP address from the WAN
>- Web UI accessible from any IP on the LAN
>
>Having to specify IP addresses within the LAN doesn't make sense, because those IP addresses are assigned >by DHCP and change. Perhaps if I could specify a range of IP addresses (192.168.1.1 - .255)

You can try starting a thread in the Asuswrt - Official sub-forum here. There are a few Asus representatives monitoring it.