WebLogic provides a default connection filter that can perform IP address filtering. The weblogic.security.net.ConnectionFilterImpl filter accepts all incoming network connections and provides static methods that allow the server to obtain the current network connection filter. This filter can be configured using the WebLogic Administration Console, or by editing the domain config.xml file.
To Configure IP Filtering Using the WebLogic Administration Console
Open the WebLogic Administration Console and navigate to the domain.
Select Security > Filter from the tab menu.
In the Connection Filter property, enter the connection filter class
weblogic.security.net.ConnectionFilterImpl.In the Connection Filter Rules property, enter the connection filter rule. When entering a rule, enter them in following format:
targetAddress LocalAddress localPort action protocolsRestart your servers to initiate the configuration changes.
To Configure IP Filtering By Editing the config.xml File
Open the
WebLogic_home/user_projects/domain/domain_name/config/file.
config.xmlEdit the file to add the following filter configuration:
<security-configuration>
...
<connection-filter>weblogic.security.net.ConnectionFilterImpl
</connection-filter>
<connection-filter-rule>192.168.0.0 127.0.0.1 7001 allow http https t3
t3s</connection-filter-rule>
<connection-filter-rule>192.168.0.0 127.0.0.1 7003 deny
</connection-filter-rule>
</security-configuration>Save the config.xml file and restart your server.
The following is an example of a network connection filter rule:
192.168.0.0 127.0.0.1 7001 allow http https t3 t3s # allow access for 192.168.0.0 to 127.0.0.1:7001 for http, https, t3 and t3s protocols 192.168.0.0 127.0.0.1 7003 deny # deny access for 192.168.0.0 to 127.0.0.1:7003 for all protocols
For further examples, and additional information, refer to your WebLogic documentation for the ConnectionFilterImpl filter.
