We have an existing Vibe 3.3 installation that is working well. It is available from both internal and external networks. We'd like to add another zone that is only available from one internal subnet. I created that 2nd zone and set up an IP address condition role and then assigned that to all the existing role definitions. In testing, I can log in as that test user and not see any content unless I log in from an allowed IP. Is there any way to simply disallow logins instead if the user is coming from a banned IP? Or at least present to the user a message they need to be logging in from the correct location? And of course any ideas mustn't compromise the existing, live Vibe site.

The overall goal will be a Vibe site used by just a few people that is severely locked down - no email access to/from and so on.


Todd Bowman