==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):  0.9.7
- Linux/BSD distribution name and version: centos 7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): ldap
- Web server (Apache or Nginx): nginx
- Manage mail accounts with iRedAdmin-Pro? yes 3.1
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

In iredmail, under advance setting there is restrict mail user to login from specified IP addresses or networks.
It supposed to allow only the specified ip to login under the user login.
However, upon setting it, it does not take effect, do we need to restart the service to take effect?

To restrict IP login for iRedAdmin-Pro, please use the Nginx builtin ACL, we have sample config in Nginx config file /etc/nginx/templates/iredadmin.tmpl like below:

location ~ ^/iredadmin(.*) {
    ...

    # Access control
    #allow 127.0.0.1;
    #allow 192.168.1.10;
    #allow 192.168.1.0/24;
    #deny all;
}

You need to uncomment the 'allow', 'deny' lines, and replace above sample IP addresses/networks by your real ones.

Oh, this is simpler.

Add setting "GLOBAL_ADMIN_IP_LIST" in iRedAdmin-Pro config file "settings.py" like below, then restart uwsgi service.

# List of IP addresses which global admins are allowed to login from.
# e.g. ['127.0.0.1', '192.168.1.1']
# Valid formats:
#   - Single IP addess: 192.168.1.1
#   - IP range:         192.168.1.1-30
#   - Whole subnet:     192.168.1
GLOBAL_ADMIN_IP_LIST = ['192.168.1.1', '192.168.2.1']

can confirm this only apply to global admin and not affect other user using it?