Custom network access
You can create IP address range groups to control access to the services you provide. These ranges can be ones you control on your private network, or they can be any publicly accessible IP address range.
Click the “Allow connections from” pop-up menu, then choose one of the following:
All networks
Private networks (this automatically includes all non-routable IP address ranges like 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 169.254.0.0/12)
Only some networks
If you select “only some networks,” continue with these instructions. Otherwise, click OK.
Click the Add button , then select an IP address group.
If the IP address group you want isn’t listed as a choice, you need to create it first by choosing “Create a new network.” Then see “Create an IP address group while customizing service access” in Create custom network access definitions in macOS Server.
To add more address groups, repeat as needed.
When you’ve added all the desired IP address groups, click OK.