I saw that guide awhile back which led me to the config file that I thought I had modified adequately, but apparently the allow of an IP address or a range actually doesn’t grant access as I had thought. Disabling all these as you have in the linked guide is what granted access. I don’t know why that is, but I was getting error 404 instead of 403 which means it was having an impact.
This is the settings I had that were failing, the last section being the problem child:
#block/ignore requests for Application.cfc/cfm
# location ~* Application.cf[mc]$ {
# return 404;
# }
#block/ignore requests for /lucee-server
# location ~* /lucee-server {
# return 404;
# }
#block/ignore CFIDE requests
# location ~* /CFIDE {
# return 404;
# }
# location ~* /*.cfc$ {
# return 403;
# }
location ~* /lucee/ {
# allow 10.0.0.1; # Add your IP address here
allow 10.10.8.55; #Added by "me" 20180526
deny all;
}