Allow list for IPs

[francoisPE]

Hello,
I use your app in my nextcloud, called (a)
This one is connected to another one, called (b)
It works well and it is very interesting except :
Suspicious_login of (b) is considering webdav call of (a) as suspiscious.

I try
php occ suspiciouslogin:train
php occ suspiciouslogin:etl
php occ suspiciouslogin:optimize

Nothing changed

I would propose to add a whitelist in the code in order to whitelist some IPs
What do you think ?

[bcutter]

Oh yes, please - finally an IP based whitelist! Like we have for the native bruteforce protection.

[npalix]

+1 The current behavior doesn't converge efficiently with IPv6 adresses using /64 mask.

[CrazyWolf13]

I just got a mail that my instance has been accessed from a new as suspsicious flagged IP, how the hell is 10.10.20.9, a local IP in the same subnet as the NCP server flagged as suspsicious?

[muchachagrande]

I have the same problem but with IPv6 ULAs. Each time I get a different ULA and I login, a mail arrives warning me about a suspicious login.
I need a whitelist to include the entire subnet that should be considered "not suspicious".