In order to be certain that access to the web interface is from a user logged into the SmoothWall server and not some third party web page, a referral check is done. Enabling this feature means it is only possible to administer the SmoothWall if the URL you visit contains either a local IP address, the local hostname, or the external IP address (if applicable).
