...
webservices.rest.allowedips - By default this is "", which which means anyone can access the rest urlsURLs. If you put any ip IP addresses into this list, only calls from those are allowed. Non matching IP addresses will receive a 403 HTTP error. You can put wildcard * characters into the IP addresses to denote whole subdomains that can access the urls: 192.168.0., 192.168.1.* will allow most local IPs throughIPs should be separated by a whitespace or a comma. IPs can be declared with bit masks to denote whole subdomains e.g. 10.0.0.0/30 matches 10.0.0.0 - 10.0.0.3 and 10.0.0.0/24 matches 10.0.0.0 - 10.0.0.255. Non matching IP addresses will receive a 403 HTTP error. Both IPv4 and IPv6 addresses are supported.