Skip to content

IP allowlist doesn't allow ipv6 ranges #752

@HitLuca

Description

@HitLuca

by default each app ip allowlist setting is 0.0.0.0/0, which works fine for most use cases. An issue arises when the app is exposed to the internet, in my case via a cloudflare tunnel (cloudflared, not the cloudflare-ddns role in this project). Incoming requests use ipv6, which result in 403 Forbidden errors as the ipallowlist middleware blocks them. Since the rule allows any ipv4, updating it from 0.0.0.0/0 to 0.0.0.0/0, ::/0 will fix the issue.

This problem seem to only affect portainer and bitwarden, as other apps don't use the ipallowlist middleware

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions