How to allow/deny access to alfresco sites for different IPs?

[leblexx]

Hi all,

I want to prevent access to the sites from different IP addresses or grant access for several addresses.

Please, give me an advice about best way to implement such feature.

 Many thanks.

[mehe]

Do you want a global grant/denial of IPs for the whole alfresco site (could be done with a tomcat remote address valve Apache Tomcat 7 Configuration Reference (7.0.77) - The Valve Component )

or an IP based access control for each alfresco share site? (could be done with apache as reverse proxy, because the site name is a part of the url)

But maybe a more sophisticated Alfresco Admin knows some internal mechanism - I can't see one... 

[leblexx]

Thanks for your answer, Martin.

I already have IP restrictions for user for whole alfresco site.

Now I want an IP based access for share sites, actually for nodes in that site.

[mehe]

I don't think that I like the concept , but that's up to you.

The nodeid is also part of the url if you access a node, so you can add an remote address or ip filter 

Apache Tomcat 7 Configuration Reference (7.0.77) - Container Provided Filters 

and change the url pattern accordingly (or use a reverse proxy and filter with that...)

But maybe you could describe what you want to achieve - isn't a group or user based restriction a better solution?