{"id":8906,"date":"2023-11-29T01:28:28","date_gmt":"2023-11-29T01:28:28","guid":{"rendered":"https:\/\/www.use-snip.com\/kb\/?post_type=ht_kb&p=8906"},"modified":"2023-11-30T17:12:29","modified_gmt":"2023-11-30T17:12:29","slug":"entering-ip-values-to-block-or-allow","status":"publish","type":"ht_kb","link":"https:\/\/www.use-snip.com\/kb\/knowledge-base\/entering-ip-values-to-block-or-allow\/","title":{"rendered":"Entering IP values to block or allow"},"content":{"rendered":"

This article describes how to use the IP dialog found in SNIP<\/strong> <\/span>to enter a single IP, or a range of IPs, when blocking<\/strong> (banning) or exempting<\/strong> (allowing) remote connections to your NTRIP Caster.<\/p>\n

Any IP that is blocked is prevented from connecting to your NTRIP Caster<\/a>.\u00a0 The block can temporary<\/strong>, (in that it expires and is automatically removed after a period of time allow the IP to connect again).\u00a0 Or it can be permanent<\/strong>, in that it is never automatically removed.\u00a0 The IP banning logic, when enabled, detects repeating problematic connections to the Caster and will automatically block the offending IP for the period of time you have selected. \u00a0See this article<\/a> for further details on how to setup the thresholds and other values used.<\/p>\n

An IP can also be exempted<\/em> from ever being blocked.\u00a0 Such IPs are never<\/strong> blocked by the IP banning logic. \u00a0This is used when you have a range of \u201ctrusted\u201d IPs you never wish to have blocked, regardless of any abuse by those connections.\u00a0 A similar exempt list is provided for NTRIP Client user agent strings.\u00a0 \u00a0See this article<\/a> for further details on how to setup these values.<\/p>\n

In the IP Banning Dialog you can also select if blocking and unblocking events are to be reported in the console log<\/a>.\u00a0 In a smaller Caster when such events not common, you may want to see these messages.\u00a0 In a large caster with many public users and constant bad connections, you may prefer to not see them.\u00a0 Keep in mind that SNIP<\/strong><\/span> is performing a software firewall with these features.\u00a0 If you have also enabled firewall rules on the host machine (or a router), SNIP<\/strong><\/span> will never see any connection you have prohibited there. \u00a0See this article<\/a> for further details.\u00a0 [In general it is more effective in terms of machine MIPS to have SNIP<\/strong><\/span> do the filtering.]<\/p>\n

This dialog was introduced in SNIP<\/strong><\/span> Rev 3.13<\/strong> and replaces a simpler dialog found in prior editions of SNIP<\/strong><\/span>. In the earlier dialog only one range of IPs was supported, always covering the lowest byte (often expressed as a range like xx.xx.xx.* or a CIDR \/24 range).<\/p>\n

In this new dialog the IP range can be set between any two independent values as required.\u00a0\u00a0 This allows blocking (or allowing \u2013 in other words exempting<\/em> from being blocked) large sections of the public or private internet when desired.<\/p>\n

In various reports the resulting IP ranges are also now shown, typically as a two-line textual note in the form of \u201cx.x.x.x to x.x.x.x\u201d in the tables. Links to single IP values in dialogs continue to go a geo-location<\/a> report about the IP and how it has been used for connections to the Caster.\u00a0 \u00a0When a range of IPs is used in a report, the first IP in the range is given as a similar link, and from the geo-location report the reader can click to other IPs that have been seen using the links at the top of the report page.<\/p>\n

The dialog also provides a means to add two optional<\/em> textual notes.\u00a0 First; the mountPt name<\/strong> that was involved.\u00a0 And second; a short text note<\/strong> about the rationale or cause for the blockage. \u00a0This content s completed automatically by the SNIP<\/strong><\/span> IP blocking logic for most temporary blocked IPs.\u00a0 But you can now also add it for permanent<\/em> or exempt<\/em> entries.\u00a0 This has value to help the SNIP<\/strong><\/span> operator recall why an IP was added in the future.<\/p>\n

The Dialog<\/strong><\/h2>\n

The basic IP Entry dialog appears below. \u00a0Not all of the sections shown below are displayed in every use case (sections that are not required are hidden).<\/p>\n

\"\"<\/a><\/p>\n

The controls<\/strong><\/h2>\n

Next we review the various controls in the dialog.\u00a0\u00a0 As found on most SNIP<\/strong> <\/span>dialogs, the small \u201ci<\/strong><\/span>\u201d icon in the upper right side brings up a contextual help page in the document viewer (this page).<\/p>\n

Using the dialog consists of selecting which type of IP to enter (a single IP or a range) and then entering it. \u00a0As values are entered the status label (here shown with the text Please enter the IP value<\/em>) will change with helpful hints and warnings about the validity of the entered data or possible conflicts with other existing values.\u00a0 If the value is valid, the OK<\/strong> button is enabled.<\/p>\n

The Single IP Value Group<\/strong><\/h3>\n

The dialog defaults to this mode as single IP values are the most frequently used.\u00a0 The four bytes of the IP are entered as individual spin boxes. \u00a0The small button P<\/strong>\u00a0 (for paste<\/em>) can be used to easily transfer a IP as a string from the clipboard to the spin boxes. \u00a0The logic will extract a the first valid IP it finds in the clipboard text.\u00a0 \u00a0Any problem with the IP (such as a conflict with an existing IP) are shown in the status line below.<\/p>\n

Hint<\/strong>:<\/span>\u00a0 Select and copy the source IP with your mouse from the console or a report and then use the P<\/strong> button for rapid IP entry.<\/p>\n

The Range of IP Values Group<\/strong><\/h3>\n

This mode must be selected before use by checking the group box. Entering the starting and ending values follows the same process and rules as for the single IP value.\u00a0 The ending IP is expected to be larger than the starting IP.\u00a0 And the covered range is inclusive of these two values. \u00a0\u00a0So a range like:<\/p>\n

\"\"<\/a><\/p>\n

Will also block the IP value 1.2.4.0, not just 1.2.3.0 to 1.2.3.255<\/p>\n

The status label<\/strong><\/h3>\n

This label up updated as the data is entered to show any problems detected, such as conflicting IP ranges.\u00a0 The problem must be corrected before the dialog can be saved.<\/p>\n

The Optional Text\u00a0 Sections<\/strong><\/h3>\n

Here you can (optionally) enter a valid MountPt about the IP (using only valid MountPt characters, so a space is not allowed).<\/p>\n

Here you can also (optionally) enter a short note about the IP. When SNIP<\/strong><\/span> does this it may also use html markup which is then not displayed but which is present in the actual text. This is useful for various reports.<\/p>\n

The Ban \/ Block time period Group<\/strong><\/h3>\n

This section allows entering the ban \/ block period of time, or making the entry a permanent one.\u00a0 It is not shown for exempt <\/em>entries.\u00a0 The values in the combo box range from 5 minutes to 4 weeks in duration. The default value to use will follow whatever value you have setup in the General IP blocking dialog.<\/p>\n

OK \/ Cancel Buttons<\/strong><\/h3>\n

These perform the expected actions.\u00a0 Pressing OK<\/strong> adds the current value to the owning list.\u00a0 If the dialog was editing a prior value, the contents are updated. \u00a0If not, the contents are added to the list. Pressing Cancel<\/strong> exits the dialog without change or saving anything.\u00a0 \u00a0[When needed, Items can be removed from the dialog that displays the list in question, either IP banned list or the Exempt IPs.]<\/p>\n

Hint<\/strong><\/span><\/h3>\n

You can also access this dialog directly with the menu command:<\/p>\n

SetUp \u21d2 IP Ban\/Block Settings \u21d2 Bock and IP…<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

This article describes how to use the IP dialog found in SNIP to enter a single IP, or a range of IPs, when blocking (banning) or exempting (allowing) remote connections to your NTRIP Caster. Any IP that is blocked is prevented from connecting to your NTRIP Caster.\u00a0 The block can […]<\/p>\n","protected":false},"author":13,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"ht-kb-category":[112,283],"ht-kb-tag":[346,431,517],"class_list":["post-8906","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-general","ht_kb_category-managing-user-accounts","ht_kb_tag-ban","ht_kb_tag-ip-adress","ht_kb_tag-ip-blocking"],"_links":{"self":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/8906","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/comments?post=8906"}],"version-history":[{"count":8,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/8906\/revisions"}],"predecessor-version":[{"id":8923,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/8906\/revisions\/8923"}],"wp:attachment":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/media?parent=8906"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb-category?post=8906"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb-tag?post=8906"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}