1 files changed, 33 insertions, 0 deletions

diff --git a/nginx-common/conf/includes/internal_ip_allow_only.conf b/nginx-common/conf/includes/internal_ip_allow_only.conf
new file mode 100644
index 0000000..0a4e152
--- /dev/null
+++ b/nginx-common/conf/includes/internal_ip_allow_only.conf
@@ -0,0 +1,33 @@
+# Global V4 Internal Network
+allow 172.16.0.0/16;
+# FKL1 V4 Internal Network
+allow 172.18.0.0/16;
+# SEA4 V4 Internal Network
+allow 172.19.0.0/16;
+# ORD1 V4 Internal Network
+allow 172.20.0.0/16;
+# Mobile V4 Internal Network
+allow 172.21.0.0/16;
+# PDX1 V6 Network
+allow 2600:1f14:f39:e000::/56;
+# CMH1 V6 Network
+allow 2600:1f16:33:500::/56;
+# LHR1 V6 Network
+allow 2a05:d01c:7ba:b800::/56;
+# SEA1 Internal V6 Network
+allow 2602:0803:4070::/48;
+# SEA4 Internal V6 Network
+allow 2602:0803:4072::/48;
+# SEA4 Remote Access VPN V6 Network
+allow 2602:0803:4075::/48;
+# ORD1 Internal V6 Network
+allow 2602:0803:4073::/48;
+# FKL1 Internal V6 Network
+allow 2602:0803:4074::/48;
+# Wireguard RAS V6 Network
+allow 2602:0803:4075::/48;
+# Mobile V6 Internal Network
+allow 2602:0803:4076::/48;
+
+allow 127.0.0.1;
+deny  all;