add option for strict ip filter