accesslog overlay - filter by ip addresses (advise)