ClientAddressFilter

Client IP address filter. Allows specification of one or more IP addresses or address ranges.

When specified, requests to this image catalog that originates from a client at an unlisted IP address is rejected. localhost is always implicitly part of the ClientAddressFilter definition, even if not explicitly specified. Requests originating from localhost are never rejected, regardless of the ClientAddressFilter specification.

Properties

Comma-separated list of IP addresses with optional netmasks (CIDR notation is used):

*ipAddress*[/ *netmask*]*[, *ipAddress*[/ *netmask*]]

• ipAddress IP address in ddd.ddd.ddd.ddd format

• netmask net mask (0…32)

This attribute is ignored when a pre-processing rule with an <addressfilter> element is applied.

Default

Inherited from default::AddressFilter if not defined or if empty.

Examples

• No access restrictions: 0.0.0.0/0

• Grant access to all addresses starting with 192: 192.0.0.0/8

• Grant access to the 512 hosts with addresses between 192.168.12.0 and 192.168.13.255: 192.168.12.0/23

• Grant access to a single IP address: 192.168.2.117 or 192.168.2.117/32

See also

addressfilter