myMPD supports simple IP ACLs to restrict connections to the webserver and to the remote scripting API endpoint.

The ACL is a comma separated list of IPv4 subnets: x.x.x.x/x Each subnet is prepended by either a - or a + sign. A plus sign means allow, where a minus sign means deny.

If the acl is empty, all connections are allowed else all connections are denied if not explicitely allowed.

Example ACLs

+ Allow all
+ Allow localhost
+,+ Allow localhost and all hosts in the net 192.168.0.x