IP Address Restriction

IP address restrictions can work in two ways. One is to allow access to everyone but a few by default. The other is to deny access to everyone but a few by default.

For example, the packet filter can be programmed to allow access to almost everyone outside the network (on the Internet), but deny access certain individual networks or computers because of problems that have originated from these places in the past.

On the other hand, the packet filter can be programmed to deny access to everyone by default while allowing a few selected computers or networks access by exemption.

Thus, for example, access can be restricted to a few selected networks outside the protected network that are trusted becuase they are owned by the same organization as the protected network.