ip filter can be blacklist or whitelist