can we disable all rest api?

SuiteCRM Forum - English Language SuiteCRM General Discussion
1

hello
it appears someone is trying to get to the crm using the rest interface.
can we disable this feature, I do not use it…
I code either direct sql or I try to use bean more ane more…

on this situation can I disable rest all together?

Thank you

2

REST API won’t work without OAuth permissions, so we could say it’s disabled until you enable it.

But you could block those IP’s with Fail2Ban (good to have that running, in any case), and you could work on your htaccess file to stop serving those URL’s.