How to restrict jira access/browsing only to a certain set of ip's.

[Kapil Bolli]

Hello I am using JIRA 4.3.2, we want our JIRA to be accessible only to certain IP's.

How can we achieve it.

[Colin Goudie · Accepted solution]

I would recommend this is done at the firewall level if the server is behind one. Or if you are using apache webserver in front of JIRA you could use mod_access directives.

e.g.

http://httpd.apache.org/docs/1.3/mod/mod_access.html#allow

[ViktorT]

The best solution is definitely to configure your firewall. But technically you can also configure urlrewrite.xml

Documentation link http://urlrewritefilter.googlecode.com/svn/trunk/src/doc/manual/3.2/index.html

[Nic Brough -Adaptavist-]

Jira doesn't support this in any way (and it's the wrong place to do it anyway - ip-restricted requests shouldn't reach the service at all). You need to block them in the network (firewalls) or web-server side (apache or IIS)

However, bear in mind why you are doing this. If it's for security, please reconsider - it is quite easy to fake up addresses on packets, so it's not useful for security.