ClientAddressFilter :headding-anchor:clientaddressfilter
Client IP address filter. Allows specification of one or more IP addresses or address ranges.
When specified, requests to this image catalog that originates from a client at an unlisted IP address is rejected. localhost
is always implicitly part of the ClientAddressFilter
definition, even if not explicitly specified. Requests originating from localhost
are never rejected, regardless of the ClientAddressFilter
specification.
Properties :headding-anchor:section-21a2992f108d42fb8660c0d65aa61e13
Comma-separated list of IP addresses with optional netmasks (CIDR notation is used):
*ipAddress*[/ *netmask*]*[, *ipAddress*[/ *netmask*]]
-
ipAddress IP address in ddd.ddd.ddd.ddd format
-
netmask net mask (0…32)
This attribute is ignored when a pre-processing rule with an <addressfilter>
element is applied.
Default :headding-anchor:section-beddaa18ed6c4f3ba1eb2d4471267712
Inherited from default::AddressFilter
if not defined or if empty.
Examples :headding-anchor:section-72b4a3615bff4a5f8b03d83c6489aaba
-
No access restrictions:
0.0.0.0/0
-
Grant access to all addresses starting with
192: 192.0.0.0/8
-
Grant access to the 512 hosts with addresses between
192.168.12.0
and192.168.13.255: 192.168.12.0/23
-
Grant access to a single IP address:
192.168.2.117
or192.168.2.117/32