Webpages Access Filter

You can set webpages access filter under the Security settings. You can set webpages access filter access filter on server level - you can not set user or domain specific security filters. With this filter you specify rules for accessing web pages.

In the example above you specify IP address from where the page /users/main/join.html will be accessible. From every other IP address you couldn't access this page. You can also use wildcard instead of path - then the filter will apply to all ISL Conference Proxy web pages.

NOTE: You can also specify filter from the above example without deny_all - by default filter allow_ip works only on specified IP addresses and block every other IP addresses.

You can also set filter for specific user and specific path. This will work only on pages where you need to login first, because otherwise filter can't match user_id and path. In the example above you specify denied IP address range for web page /users/isllight/start.html.

NOTE: When you specify deny_ip filter you MUST add also grant_all at the end of the filter - otherwise ISL Conference Proxy will deny every IP address.

All possible combinations for webpages access filter are:

[path * OR path <actual path>]
allow_ip <IP address>;
allow_ip <IP address range>;
deny_all;
deny_ip <IP address>;
deny_ip <IP address range>;
grant_all;

[user_id=<user ID>|path=* OR path=<actual path>]
allow_ip <IP address>;
allow_ip <IP address range>;
deny_all;
deny_ip <IP address>;
deny_ip <IP address range>;
grant_all;

A few examples for webpage access filter setting:

# Allow join page only to one IP
[/users/main/join.html]
allow_ip 1.2.3.4;
deny_all;

# Allow join page to subnet
[/users/main/join.html]
allow_ip 1.2.3.0/255.255.255.0;
deny_all;

# Deny join page to one IP
[/users/main/join.html]
deny_ip 1.2.3.4;
allow_all;

# Deny join page to subnet
[/users/main/join.html]
deny_ip 1.2.3.0/255.255.255.0;
allow_all;

# Allow access to /users/ webpages only to one IP
[/users/*]
allow_ip 1.2.3.4;
deny_all;

# Allow access to /users/ webpages only to subnet
[/users/*]
allow_ip 1.2.3.0/255.255.255.0;
deny_all;

# Deny access to /users/ webpages only to subnet
[/users/*]
deny_ip 1.2.3.0/255.255.255.0;
allow_all;

# Deny all webpages only to one IP
[*]
deny_ip 1.2.3.4;
allow_all;

# Allow all webpages only to one IP
[*]
allow_ip 1.2.3.4;
deny_all;

# Deny user with id s1_0_3 access to page /users/isllight/start.html when he has IP 1.2.3.4
[user_id=s1_0_3|path=/users/isllight/start.html]
deny_ip 1.2.3.4;
grant_all;