Website access restriction methods

Because of industry security standards and audit requirements, you might need to implement high-level security tuning for a public Drupal site. There are several methods you can use to do this, including adding a module to your website or configuring IP restriction in Drupal itself. You may also need to block particular IP addresses due to attacks or other problems.

Website security modules

The drupal.org website contains several popular contributed modules that can help you tune your website's security. These modules' functions can involve restricting access either to an entire website or to specific paths or defining access whitelists when you don't manage a firewall for that website. The following popular modules are a few that you might find useful - evaluate the modules based on your particular site needs:

 

Module Drupal 6 Drupal 7 Drupal 8
IP Ranges   Yes Yes (In dev)
Rabbit Hole Yes Yes Yes (In dev)
Restrict Login or Role Access by IP Address Yes Yes Yes (In dev)
Secure Site Yes Yes Yes (In dev)
Shield Yes Yes Yes
GoAway Yes Yes  
Form Block IP   Yes Yes

Read about IP restriction in Drupal.

Contact supportStill need assistance? Contact Acquia Support