Suggestions for an implementation in Django

Question

I have a blog created on django and I need to configure the access using iptables. I do not have any idea how to do it, anybody can indicate some material? I was thinking about creating a function where it is possible to pass a range of ip numbers that are allowed to access, but I don't exactly where to do that in django.

@MohamedElKalioby The app I'm creating will work on a private server, it won't be open to the public. So the idea is that only specific ips can access it. — Fabian, Jun 09 '21 at 14:10
You can simply check the request headers if it matches certain ips. — oluwakayode, Jun 09 '21 at 14:13

score 0 · Answer 1 · answered Jun 09 '21 at 14:19

0

Then the best way is to create a middleware for that, it checks if the IP is in good range,

def checkIP(get_response):
   def middleware(request):
      x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
      if x_forwarded_for:
         ip = x_forwarded_for.split(',')[0]
      else:
          ip = request.META.get('REMOTE_ADDR')
      if not ip in settings.GOOD_IPS:
           return HttpResponseForbidden("You are not allowed here")
      response = get_response(request)
      return response
return middleware

But generally, this is NOT a recommended behavior as IPs can change and the user could try to access from another terminal

answered Jun 09 '21 at 14:19

Mohamed ElKalioby

1,908
1
12
13

I was thinking about using iptables. What do you think? – Fabian Jun 09 '21 at 14:26
Surely it can be done, but middleware can give you more flexibility as checking the user as a superuser can access from anywhere, this can't be done by iptables – Mohamed ElKalioby Jun 09 '21 at 14:28
Thank you! I really appreciate your suggestion and it solve my problem. – Fabian Jun 09 '21 at 14:34
Try it and approve the answer if it works please – Mohamed ElKalioby Jun 09 '21 at 14:35

Suggestions for an implementation in Django

1 Answers1