ipWhitelist doesn't work for me

Beh

I just updated my mirror to 2.1.0 and tried to add some IPs to the whitelist, but it doesn’t work. I am not able to access the mirror from an IP added to the ipWhitelist array.

The array in my config looks like this:
ipWhitelist: ["10.0.0.55", "192.168.178.77", "127.0.0.1", "::ffff:127.0.0.1", "::1"]

Do you have any idea, why this does not work?

/cc @Jopyth and @MichMich

Beh

OK, after some trying, I think this related to the IPv6 configuration of my network and/or the Pi.

When I add "::ffff:192.168.178.77" to the list, I can access the Mirror via browser by entering the IPv4 address of the mirror into the browser’s address field.

MikeColes

@Beh , I ran into the same problem with the same solution. A /24 CIDR didn’t work, probably because of the IPv6 format.

Has anyone played around with getting a correct network format in use?

mochman

I got it to work using "::ffff:192.168.1.1/24".

MichMich

If you check your node console output, It should show the blocked IP.

lolobyte

@MichMich

how to check this?

DazDavid

@mochman Thanks for the hint. That is also working for a whole range like “::ffff:192.168.2.0/24”

mochman

@DazDavid Yeah, I messed up with the CIDR notation for IPv6. The reason why “/24” works is because that gives you practically every IP (especially every IP4 address). If you want to just have 192.168.X.0 - 192.168.X.255 whitelisted, you should use "::ffff:192.168.X.1/120".

I added a HOWTO guide here to help out everyone.