check allowed IPs