Start/notes.ini Parameters/Allow_Passthru_Clients

Allow_Passthru_Clients

🛠️
Parameter: Allow_Passthru_Clients
Short description: Notes clients (users, groups) allowed to use this server as a passthru hop to reach backend servers.

Profile

Parameter
Allow_Passthru_Clients
Category
Security / TLS
Component
Server
Available since
9.0.1
Supported versions
9.0.1, 10.0, 11.0, 12.0, 14.0, 14.5, 14.5.1
GUI equivalent
Server document (Security → Access this server via passthru)
Possible values
Comma-separated name list; empty = no one

Description

Mobile or external Notes users can access internal servers via a DMZ server using passthru, without having to talk to each backend directly. Allow_Passthru_Clients precisely defines who is allowed to use this function as an endpoint.
Less common in the modern SafeLinx/reverse-proxy era, but still relevant in classic Notes-only setups.

Example configuration

Allow_Passthru_Clients=MobileNotesUsers/acme

Notes & pitfalls

  • Only effective if Allow_Passthru_Access also allows access.
  • Logically belongs together with Allow_Passthru_Targets (which backend servers are reachable).
  • Maintain restrictive lists on DMZ servers – no open * entries.
  • Reconcile with the Trusted Servers field in the Server document.
  • The change takes effect after a server restart.