The IP Access tab allows you to restrict access to your Serv-U FTP server by IP address. Client IP addresses can be allowed or denied access according to rules specified here. Access can be specified using IP names or IP addresses (or combinations of both). This tab is accessed when Settings is selected for a domain.
To add a rule, first specify whether this is a Deny access rule (deny access to an IP address or address mask), or an Allow access rule (allow access based on an IP address or address mask).
IP addresses can be specified with wild cards. The following special characters may be used. For more information, check out Defining IP access rules.
· The star '*' character functions as a wildcard for checking the IP address. A '*' in a section of the IP number indicates that all numbers in that part of the IP address qualify as a match.
· The question mark '?' character functions as a wildcard in IP names only, to stand for a single character.
· The hyphen '-' character functions as a range in an IP address. For example, the number 152.2.200-202.103 will allow the numbers 200, 201, or 202 in the third part of the IP address.
The Rule list on the right hand side shows the current list and order of IP rules. Rules can be added and removed from the list using the Add and Remove buttons to the left of the rule list. Also, the order of the rules may be altered using the Up and Down buttons on the bottom of the rule list.
By default, there are no IP access rules and all IP addresses are allowed to connect to the server. Once the first rule is entered, a user must pass the access rules before access is granted. In order to access the server, a user has to match an ‘allow’ rule. If a user's IP matches a 'deny' rule, the access is denied.
Important Note
THE ORDER OF THE RULES IS IMPORTANT! When a client contacts the server, the rules are evaluated from top to bottom in the list of rules. The first matching rule applies and evaluation is stopped. If the order is incorrect this may cause rules to never get evaluated.