Using IP address restrictions

IP Address Restrictions allow you to do one of the following:

  • deny access to the script based on IP address. This allows you to block access from certain users who are causing problems, while granting access to everyone else. This is referred to as Moderate Security

  • or, grant access to the script based on IP address. This allows you to enhance security by blocking all traffic except that which originates from a few trusted addresses. This is referred to as Strict Security

Note that access to Genesis always requires a valid username and password. IP Address Restrictions are additional restrictions placed on the visitor, above and beyond the username and password.

To enable this feature:

  1. Make sure you're running Genesis version or newer.

  2. Login to Genesis as "webmaster". Navigate to Admin Page => Manage System Settings. Scroll to the bottom of the page and click on "IP Address Restrictions"

  3. Verify that Genesis has properly detected your IP address. If it has not, select the appropriate option and you will be shown how to correct the problem.

  4. On the next page, select a security mode. If you are offering web hosting to many people, use Moderate Security to allow everyone to connect by default. The IP restrictions will allow you to exclude certain problem users.

    If you are only offering access to one person or a few people, you can enable Strict Security. That will allow access only from the few trusted IP addresses used by you and the other authorized users.

  5. On the next page, enter in the IP addresses to be excluded or included, according to your configuration. Note that the IP Address Restrictions do not take effect until at least one Exclusion Rule has been created and enabled.

Things to note with regard to this feature:

  • Not everyone will be able to use this feature because the IP address of the client is not available to Perl scripts under certain circumstances (i.e., if your web server is running behind a reverse proxy).

  • If you define a set of exclusion rules that will exclude you, then the system will warn you about this before letting you save.

  • If you lock yourself out of the system using IP restrictions, refer to How to override IP address restrictions.