table.lookup_acl

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

acl documents {
  "192.0.2.0"/24;
  "203.0.113.0"/24;
}

acl images {
  "198.51.100.0"/24;
  "2001:db8::"/32;
}

# fallback to disallow any file extension not explicitly listed
acl empty {
}

table ext ACL {
  "doc":  documents,
  "docx": documents,
  "pdf":  documents,

  "png":  images,
  "jpg":  images,
  "jpeg": images,
}

sub vcl_recv {
  if (client.ip !~ table.lookup_acl(ext, req.url.ext, empty)) {
      error 403;
  }
}