Trust or block IP addresses and CIDR ranges

Where: Protection → IP whitelist / Address rules

Steps

1. Confirm the intended visitor IP from trusted core resolution.
2. Enter a valid IPv4/IPv6 address or CIDR with the desired trust/block action.
3. Review normalised range and any overlaps before saving.
4. Use search/action filters to find and edit or remove an existing rule.
5. Test one intended ordinary address and one outside the range.
6. Retain a note explaining broad trust rules so future staff understand them.

Check the result

Trusted ranges can override broader block/rate policies. Broad trust should be deliberate. IPv6 text is canonicalised.

If it does not work

If clearing a temporary block does not help, a permanent rule may still match. Do not trust a proxy-wide range merely to fix a wrongly resolved visitor address.