Show Contents / Index / Search

Client Host Access Control Dialog Box

Getting there

Use this dialog box to add client hosts to your allow or deny list. You can use either domain names or IP addresses to specify hosts. For either, you can use regular expressions to specify an expression that matches one or more hosts.

Use a backslash before characters in the domain name that have a special meaning in regular expressions. For example, the backslashes in the sample that follows ensure that dots in the domain will be matched exactly, and not be treated as wildcard characters:

myhost\.mydomain\.com

The options are:

 

Full computer name

Select to specify a host or hosts using the fully-qualified domain name. For example, to match all hosts at acme.com, select this option and enter:

.*\.acme\.com

Use domain name expressions carefully to ensure that host access control behaves as you intend.

 

Client IP address

Select to specify a host or hosts using an IP address. The address must be in IPv4 format. For example:

 

 

123\.45\.12\.45

Matches only 123.45.123.45

 

 

123\.45\.12\..*

Matches any IP address that begins with 123.45.12, but would not match IP addresses that begin with 123.45.121, 123.45.122, etc.

 

 

123.45.12.*

Matches any IP address that begins with 123.45.12, but also matches many additional IP addresses, including those that begin with 123.45.121, 123.45.122, etc.

 

 

Caution: Always use \. to indicate a period in an IP address to avoid unexpected wildcard matches.

 

Allow connect

Add the host(s) to your list of allowed hosts.

 

Deny connect

Add the host(s) to your list of denied hosts.

Notes:

  • The resolved domain name for a client is always the fully qualified domain name. This means that when you add a host to the allow or deny list using a domain name, you must either use a fully qualified domain name, or a regular expression, to ensure that host domain names are handled correctly. For example, if you deny access to the client "mypc", the client mypc.myhost.com will be able to connect. You must explicitly deny access to "mypc\.myhost\.com" or use an expression such as "mypc\..*" to ensure that this client is denied access.
  • Client domain names are not case sensitive (as specified in RFC 4343).

Related Topics

Controlling Access from Client Computers

Regular Expression Syntax

Access Control Settings