I have a Lotus Domino server 8.5.3 that is publicly reachable via both HTTP and HTTPS. I’m using it to serve generated images, and some backend users can login to manage these images (upload new ones, edit existing, etc.).
To increase the security of the system, I want to restrict the login to certain IP addresses, so that not everyone can try to login.
The basic rules I want to establish, based on the called URLs, are:
- Deny everything else (403)
Is that possible? And if yes, how and where would I configure it?
(Edit: clarified that the server is also reachable via HTTPS.)