IP Whitelisting

IP allowlisting restricts connections by their source IP address. A service may apply it in addition to credentials, or explicitly offer an IP-only mode. These are different policies; authentication on current s4m endpoints still requires username/password.

An allowlist on a destination normally checks the proxy or VPN exit IP. An allowlist on the proxy itself would check the client’s incoming public IP. Do not confuse these two addresses. Address-assignment topic: dedicated IP. A dedicated address does not remove credentials or guarantee a clean history. Related topic: IP reputation. Keep proxy credentials out of shared code and logs. If exposed, revoke or replace them in your account.

Review allowlists and remove entries you no longer control. A shared NAT address may represent several users, so an IP rule alone does not identify one person. Address-assignment topic: dedicated IP. A dedicated address does not remove credentials or guarantee a clean history. Related topic: IP reputation. The current s4m service does not offer IP-only authentication or a combined client-IP allowlist mode. A destination IP allowlist is separate from s4m proxy authentication. It does not enable password-free access to the current s4m proxy service.