Restrict ISPConfig3 access to certain IPs

Dear all the ISPConfig 3.046 authors and users,
To increase the security level of ISPConfig3 to the highest level, I have this ideas in mind:
(1) Restrict ISPConfig3 control panel access to certain IPs;
(2) Restrict ftp access to certain IPs.

If you have any idea about how to do these, please share with each other.

 

Hi Till,
What if the user access the site with ftp client software?? Does the .htaccess method still work for ftp client softtware??

 

No, .htaccess file do not affect FTP servers.

 

I have found some information about this:
Pure-FTP and IP whitelist

http://www.webhostingtalk.com/showthread.php?t=1001235

 

We can use hosts.allow, hosts.deny to control ftp access.

 

I have found more information about the TCP Wrapper approach for pure-ftp access restriction by IP.

pure-ftpd must be incorporated with xinet.d in order be TCP wrapper aware.

If anybody can do this, please share.

 

For reader's reference, I also heard that pro-ftp has been implemented with a built-in ip access restriction function.

http://www.proftpd.org/goals.html