How can I restrict svn server to listen on lan part of the router only. I tried the --listen-host option for svnserve in daemon mode but that allows only one address. How can I allow the whole br-lan whether it is 2.4GHz, 5GHz, or Ethernet; but do not allow any access from wan?
Thanks in advance!
If all interfaces are bridged together, you have a single IP address where you can bind the server.
In general it's safe to listen on all addresses and deny access with the firewall.
By default all incoming connections to your wan zone are denied / blocked.
Take a look at the ssh server dropbear, it's listening on all addresses too.