[SOLVED] Disable http access to LuCi

Installing and Using OpenWrt
1

Hi there.

I want my openwrt router to be hardened so that only connections via ssh tunnel with public key are possible. This connection works fine but now I noticed that the http connection directly to the router's IP is still possible. How do I switch that off?

Thanks

2
  • Disable the web service (uhttpd); or
  • Make uhttpd only listen only on loopback
1 Like
3

uninstall luci ?

1 Like
4

The statement

implies to me that access to the web interface is still desired (via SSH tunneling).

The solution for this would be binding uhttpd to localhost only, as suggsted by @lleachii .

uci set uhttpd.main.listen_http='127.0.0.1:80'
uci set uhttpd.main.listen_https='127.0.0.1:443'
uci commit uhttpd
service uhttpd restart
3 Likes
5

Hi @lleachii & @jow,

after your first remarks I already had a look at my uhttpd configuration and I have seen the properties you are referring to. I performed the changes and now the access is blocked directly using the url. Thanks a lot!

1 Like
6

Glad you got it fixed. If your issue is resolved, see: How to mark a topic as [Solved]

2 Likes
7

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.