Feature Request: Implicit deny for ruleset #1450

New Issue

MrUnknownDE · 2026-04-05T19:28:41+02:00

MrUnknownDE commented

2026-04-05 19:28:41 +02:00

Originally created by @kmanwar89 on 5/25/2025

Hi,

Love Pangolin, and I'm working on securing my setup. I'd like to only allow logins from my LAN (RFC 1918 IP's), Tailscale's subnet (100.X), etc., while blocking logins for all others (with the capacity to selectively allowlist).

Is it possible to add a feature, similar to a firewall or ACL rule, that does "implicit block" or "implicit allow", without needing to specify each allow/deny?

Use case here is the standard self-hoster who would want to allow their private IP's and block basically everything else. Thanks!

*Originally created by @kmanwar89 on 5/25/2025* Hi, Love Pangolin, and I'm working on securing my setup. I'd like to only allow logins from my LAN (RFC 1918 IP's), Tailscale's subnet (100.X), etc., while blocking logins for all others (with the capacity to selectively allowlist). Is it possible to add a feature, similar to a firewall or ACL rule, that does "implicit block" or "implicit allow", without needing to specify each allow/deny? Use case here is the standard self-hoster who would want to allow their private IP's and block basically everything else. Thanks!

MrUnknownDE closed this issue

2026-04-05 19:28:41 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1450