Magnolia 4.5 reached end of life on June 30, 2016. This branch is no longer supported, see End-of-life policy.

Page tree
Skip to end of metadata
Go to start of metadata

IP and HTTP method configuration provides the ability to configure the IP addresses that are allowed to access an author or public instance. If an IP that is not configured attempts to access the instance, it will be denied access. The filtering also verifies the HTTP methods that the IP can use when accessing the instance. If an allowed IP attempts to access the instance using a HTTP method that is not configured, it will be denied access.

IP and HTTP method configuration is in Configuration > /server/IPConfig.

The default setting allows all IPs to access the instance using GET and POST methods. You can also allow HEAD, PUT and DELETE methods which are typically used by services such as WebDAV module or REST. You may want to allow these additional methods so that editors can use other tools to edit content on the author instance or to integrate other applications on the public instance.

allow-all in the above example is a rule. Any number of rules are allowed under /server/IPConfig.

Each rule must have IP and methods child nodes. An IP node's value must be set to a single IP but * is also allowed as shown above. The methods node's value can be set to multiple HTTP methods separated by commas. Any valid HTTP method can be included in the methods list.

To create a rule:

  1. Add a content node in Configuration >/server/IPConfig.
  2. Add IP and methods child nodes.
  3. Set the value of IP node to * (for all IPs) or a specific IP. The value needs to be the remote IP address contained within a HTTP servlet request.
  4. Set the value of methods to HTTP methods (single or separated by commas).
  • No labels