How to control user access by IP address

It's possible to configure CompleteFTP to allow specific users to connect only from specific IP addresses. This is done via the user property called 'Allowed IP addresses' in the User Properties panel (as shown below), but for this to have any meaning it's necessary to firstly deny access from other IP addresses.

Allowed IP Addresses

Denying access from other IP addresses

Denying access from IP addresses other than those allowed for specific users must be done via the IP filtering property in the Site Properties panel, as follows:

  1. Open the Site Properties panel
  2. Expand the IP Filtering and Auto-banning category
  3. Select the IP filtering property
  4. Click the ellipsis button on the right
  5. Select 'Allow over deny'
  6. If there's currently a rule that allows all connections, change this to deny all.

Once this is done, no connections will be allowed from any IP address. Note that more information on IP filters may be found in the section on IP Filtering and Auto-Banning.

Allowing specific IP addresses for specific users

Now that CompleteFTP has been configured to deny connections by default, we can go ahead and allow specific users to connect from specific IP addresses, as follows:

  1. Go to the Users panel
  2. Select one or more users
  3. If you're in the Overview panel, right-click and select Properties to open the User Properties panel.
  4. Select the property labelled 'Allowed IP addresses'.
  5. Enter the IP address(es) from which the user is to be allowed to connect. Separate multiple IP addresses with commas. Domain-names may also be used.
  6. Apply the changes

Note that entering allowed IP addresses simply automatically creates the appropriate user-specific IP filter rules (see here). More specifically, an 'allow rule' is created for the specified IP addresses the users on each site on which the user is enabled. Further customization of these rules may be done via the Site Properties panel.

For step by step instructions with pictures, please refer to Step-by-step guide: Accept connections only from specific users at specific IP addresses.