Accept connections only from specific IP addresses (whitelisting)
This guide illustrates how to deny access from everywhere except specific (whilelisted) IP addresses.
-
From the side-bar menu, select the 'Settings' panel (Professional Edition)
OR the 'Sites' panel (Enterprise MFT).
-
Click the ellipsis button of the 'IP filtering' property of the 'IP filtering and Auto-Banning' category.
-
In the 'IP Filtering dialog', select the 'Allow over deny' radio button.
- Create a rule to deny access from all IP addresses.
If there's currently a rule that allows all connections, change this to deny all.
Now, no connections will be allowed from any IP address.
- Create a rule that allows connections from a specific IP address.
-
Add an 'Allow (unless autobanned)' rule.
-
Enter the IP address that is permitted to connect to the CompleteFTP server, e.g. 172.16.0.88.
Note that it's also possible to allow connections from:
- The first one, two or three parts of an IP address, such as 192.168, which specifies all the IP addresses that begin with those parts.
- A specific numeric range of IP addresses, such as 192.168.2.100-150.
- An Internet host-name.
- A LAN network name.
-
Close the 'IP Filtering' dialog then click the 'Apply changes' button.