Skip to main content

Cleartext Networks

Nauthilus can check, if a remote client connected using TLS. This test will reject clients that do not communicate secured. The whitelist is for trusted local IPs and networks that are allowed to authenticate unencrypted.

note

Connections from "localhost" are allways trusted unencrypted!

Configuration Options​

cleartext_networks​

Default: empty list

IPs with an optional CIDR mask:

cleartext_networks:
  - 127.0.0.0/8
  - ::1

Example Configuration​

cleartext_networks:
  - 127.0.0.0/8
  - ::1
  - 192.168.0.200
  - 172.16.0.0/12