How do I limit access to my website?
Because of industry security standards and audit requirements, you might need to implement high-level security tuning for a public Drupal site. There are several methods you can use to do this, including adding a module to your website or configuring IP restriction in Drupal itself. You may also need to block particular IP addresses due to attacks or other problems.
Website security modules
The drupal.org website contains several popular contributed modules that can help you tune your website's security. These modules' functions can involve restricting access either to an entire website or to specific paths or defining access allow-lists when you don't manage a firewall for that website. The following popular modules are a few that you might find useful - evaluate the modules based on your particular site needs:
|Module||Drupal 6||Drupal 7||Drupal 8|
|IP Ranges||✅||✅(In dev)|
|Rabbit Hole||✅||✅||✅(In dev)|
|Restrict Login or Role Access by IP Address||✅||✅||✅(In dev)|
|Secure Site||✅||✅||✅(In dev)|
|Form Block IP||✅||✅|