diff --git a/package.json b/package.json
index 9264f21..e876caf 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "cosmos-server",
-  "version": "0.10.0-unstable26",
+  "version": "0.10.0-unstable27",
   "description": "",
   "main": "test-server.js",
   "bugs": {
diff --git a/src/utils/middleware.go b/src/utils/middleware.go
index 04881f9..e75be2b 100644
--- a/src/utils/middleware.go
+++ b/src/utils/middleware.go
@@ -305,7 +305,7 @@ func Restrictions(RestrictToConstellation bool, WhitelistInboundIPs []string) fu
 		isWhitelistPassing := !isUsingWhiteList || isInWhitelist
 
 		// check if the request is coming from the constellation IP range 192.168.201.0/24
-		if (!isInConstellationPassing || !isWhitelistPassing) { 
+		if (!isInConstellationPassing && !isWhitelistPassing) { 
 			Log("Request from " + ip + " is blocked because of restrictions isInConstellationPassing: " + fmt.Sprintf("%v", isInConstellationPassing) + " and isWhitelistPassing: " + fmt.Sprintf("%v", isWhitelistPassing))
 			http.Error(w, "Access denied", http.StatusForbidden)
 			return