What is the correct way to change the admin panel url to a custom one (i.e. www.site.com/umbraco to www.site.com/custom). I understand that there were two ways in the past to do this (see here: https://our.umbraco.org/forum/getting-started/installing-umbraco/5050-Can-i-change-admin-panel-URL) by either adding a rule to urlrewriting.config file or renaming the umbraco directory while changing the umbracoReservedPaths and umbracoPath items in web.config.
However, it looks like the urlrewriting.config is out-dated, per the following written in the urlrewriting file (it is obsolete and IIS URL reqrite should be used) and I don't think it would be best to rename the umbraco directory (I foresee a lot of issues doing this).
URLRewriting.net is obsolete and will be removed from Umbraco in the future.
If you want to do rewrites, make sure to use IIS URL rewrite: https://www.iis.net/downloads/microsoft/url-rewrite
The advantage of using IIS rewrite is that it is much faster, much less CPU intensive and much less memory intensive.
I believe the "correct" way is just to change umbracoReservedPaths and umbracoPath items in web.config. Have you actually tried that and seen any issues?
I can see this might potentially break some custom API controllers.
What is your reason for changing? If its a security thing it might just be better to put an IP block on /umbraco/ folder in IIS.
I don't want controllers breaking. The reason for changing it is purely for security. I don't really care if /umbraco/ is the path to get to the admin page.
Good point re the IP block.
What is the best way to put an IP block on the /umbraco/ folder so that only I can access it from my desired IP addresses?
You should be able to do this via IIS via the IP Address and Domains panel (if you don't see this then the component needs installing). We've done it for a couple of Umbraco sites.
Thanks, I will take a look. Does IP blocking need to be done in IIS before or after the website is released to the web server (dealing with an unlaunched website right now).
Probably on the server as you need to select a folder (using the IIS folder browser), so it will at least require a folder on the server called /umbraco so you can apply the protection.
OK., I have been successful at IP blocking the general website in the web.config, but I am not sure on how to block the specific umbraco folder. I cannot seem to ip block the umbraco folder in iis manager, since it gives the following error:
Error: The configuration section cannot be used at this path. This happens when the section is locked at a parent level. Locking is either by default (overrideModeDefault="Deny"), or set explicitly by a location tag with overrideMode="Deny" or the legacy allowOverride="false".
Any suggestions Dan?
My web.config looks like:
<!-- IP Blocking -->
<security>
<!-- this line blocks everybody, except those listed below -->
<ipSecurity allowUnlisted="false">
<!-- removes all upstream restrictions -->
<clear/>
<!-- allow requests from the local machine -->
<add ipAddress="127.0.0.1" allowed="true"/>
<!--allow network xxx.xxx.0.0 to xxx.xxx.0.255-->
<add ipAddress="xxx.xxx.0.0" subnetMask="255.255.255.0" allowed="true"/>
allowed="true"/>-->
</ipSecurity>
</security>
I'm afraid I'm not sure about blocking it in web.config - I did it via IIS interface. The way I did it was:
In IIS open the site up so you can see the tree of folders and then click on the Umbraco folder. In the right panel click on the IP Address and Domain Restrictions icon and then you can add Allow or Deny IP addresses for that specific folder.
Change url of admin panel in umbraco 7.5.10
Hi,
What is the correct way to change the admin panel url to a custom one (i.e. www.site.com/umbraco to www.site.com/custom). I understand that there were two ways in the past to do this (see here: https://our.umbraco.org/forum/getting-started/installing-umbraco/5050-Can-i-change-admin-panel-URL) by either adding a rule to urlrewriting.config file or renaming the umbraco directory while changing the umbracoReservedPaths and umbracoPath items in web.config.
However, it looks like the urlrewriting.config is out-dated, per the following written in the urlrewriting file (it is obsolete and IIS URL reqrite should be used) and I don't think it would be best to rename the umbraco directory (I foresee a lot of issues doing this).
Any help would be great.
I believe the "correct" way is just to change
umbracoReservedPaths andumbracoPathitems in web.config. Have you actually tried that and seen any issues?I can see this might potentially break some custom API controllers.
What is your reason for changing? If its a security thing it might just be better to put an IP block on /umbraco/ folder in IIS.
I don't want controllers breaking. The reason for changing it is purely for security. I don't really care if /umbraco/ is the path to get to the admin page.
Good point re the IP block.
What is the best way to put an IP block on the /umbraco/ folder so that only I can access it from my desired IP addresses?
You should be able to do this via IIS via the IP Address and Domains panel (if you don't see this then the component needs installing). We've done it for a couple of Umbraco sites.
See http://stackoverflow.com/questions/8147804/ip-restriction-for-a-folder-of-a-web-application-in-iis7
https://technet.microsoft.com/en-us/library/cc733090(v=ws.10).aspx
Thanks, I will take a look. Does IP blocking need to be done in IIS before or after the website is released to the web server (dealing with an unlaunched website right now).
Probably on the server as you need to select a folder (using the IIS folder browser), so it will at least require a folder on the server called /umbraco so you can apply the protection.
OK., I have been successful at IP blocking the general website in the web.config, but I am not sure on how to block the specific umbraco folder. I cannot seem to ip block the umbraco folder in iis manager, since it gives the following error:
Any suggestions Dan?
My web.config looks like:
I'm afraid I'm not sure about blocking it in web.config - I did it via IIS interface. The way I did it was:
In IIS open the site up so you can see the tree of folders and then click on the Umbraco folder. In the right panel click on the IP Address and Domain Restrictions icon and then you can add Allow or Deny IP addresses for that specific folder.
Thanks Dan! I'm now trying to find a clever way to allow access from a mobile device.
is working on a reply...
This forum is in read-only mode while we transition to the new forum.
You can continue this topic on the new forum by tapping the "Continue discussion" link below.
Continue discussion