Has anyone ever limited access to Craft's back-end via ip address? What paths should I limit if I'm wanting to ensure only certain ip addresses can post updates? Thanks!
If you're looking to only allow certain IP addresses to access the entire control panel, you're best bet would be to whitelist them via an
<Limit GET POST> order deny,allow deny from all allow from 184.108.40.206 </Limit>
If you're looking to just allow certain Craft-specific actions by IP address, then you'd have to write a plugin. For example, if you only want certain IP addresses to be able to create an entry, the plugin would listen for the onSaveEntry event, make sure it's a new entry, check if the user has createEntry permissions, if so grab their IP address and make sure it falls in your whitelist.
Just be aware that IP address detection can be spoofed, so you shouldn't be relying on this for any critically sensitive data.