anchor.diff:  |===
   
   == Description
  -The IP Filtering policy lets you control access to your API via IP addresses.
  -You can allow or deny a specific IP address or a range of IP by using https://tools.ietf.org/html/rfc1519[CIDR].
   
  -The whitelist mode excludes all IPs excepts those with an IP which is part of the whitelist.
  -The blacklist mode allows all IPs excepts those with an IP which is part of the blacklist.
  +You can use the `ip-filtering` policy to control access to your API by filtering IP addresses.
  +You can allow or deny a specific IP address or range of IP addresses with https://tools.ietf.org/html/rfc1519[CIDR^].
   
  -If an IP is part of the blacklist and the whitelist, the policy reject the request.
  +Whitelist mode excludes all IP addresses except the addresses included in the whitelist.
  +Blacklist mode allows all IP addresses except the addresses included in the blacklist.
  +
  +The blacklist takes precedence, so if an IP address is included in both lists, the policy rejects the request.
   
   You can specify a host to be resolved and checked against the remote IP.
   
   == Configuration
  -You can configure the policy with the following options :
  +You can configure the policy with the following options:
   
   |===
   |Property |Required |Description |Type |Default
   
   |matchAllFromXForwardedFor
   |No
  -|if set to true, each IP from the *X-Forwarded-For* header parameter is parsed.
  +|If set to `true`, each IP from the `X-Forwarded-For` header parameter is parsed
   |boolean
  -|_false_
  +|`false`
   
   |whitelistIps
   |No
  -|a list of allowed IPs with or without CIDR notation (host is allowed).
  +|A list of allowed IPs with or without CIDR notation (host is allowed)
   |string list
  -|_empty_
  +|`empty`
   
   |blacklistIps
   |No
  -|a list of denyed IPs with or without CIDR notation (host is allowed).
  +|A list of denied IPs with or without CIDR notation (host is allowed)
   |string list
  -|_empty_
  +|`empty`
   
   |===
   
  +== Examples
   
   [source, json]
  -.Sample
   ----
   "ip-filtering": {
     "matchAllFromXForwardedFor": true,
  
positive.code: }
  ----
  
  == Http Status Code
  
  |===
  |Code |Message
  
  | ```403```
  | Your IP (0.0.0.0) or some proxies whereby your request pass through are not allowed to reach this resource
  
  |===
  
  
negative.code: = IP filtering policy
  
  ifdef::env-github[]
  image:https://ci.gravitee.io/buildStatus/icon?job=gravitee-io/gravitee-policy-ipfiltering/master["Build status", link="https://ci.gravitee.io/job/gravitee-io/job/gravitee-policy-ipfiltering/"]
  