1. I want to restrict access for some manager accounts to IP addresses, but seeing these IPs are dynamic, may I use masks?
2. How do I disallow the password recovery feature (I mean "I forgot password" link)?
For number 2 just disable the "Forgot manager login" plugin.
