the ip based acls are case sensitive: This will deny the request, as the checks run against the lowercase ip ` <Allow address="2001:DB8::5" method="*.*"/> ` This will correctly allow the request ` <Allow address="2001:db8::5" method="*.*"/> `