Limit Guest account to certain IP addresses

[ktt]

Is there any way for limiting the Guest account for only certain IP addresses?

In my installation, it would be practical to allow Guest account for Intranet (e.g. 192.168.*) addresses, but require the normal account for all other addresses. Intranet based users can of course use also their own user accounts, but allowing Guest accounts for Intranet, would allow showing certain information for everyone in organization without them having to enter user credentials.

It is not possible to allow Guest account for Internet addresses.

Currently, users are authenticated by Zabbix own user authentication system and it hasn't been connected to LDAP.

[Anonymuser00989]

iptables should do the job

https://serverfault.com/questions/16...-with-iptables

[ktt]

iptables should do the job

https://serverfault.com/questions/16...-with-iptables

Sorry, but IPTables is not aware of user accounts. It can block the whole Zabbix frontend from some IPs, but at least i can't find out any way to block just one account (guest in this case) from certain IPs.

Also, there should be some Zabbix-level configuration related to this, as Zabbix front-end login screen should anyway be visible for all IPs, but the login screen should have the "Login as guest" option only for Intranet users. If IPtables solution would somehow work, it can't remove that from Zabbix front-end login screen.