diff --git a/cmd/cmd.go b/cmd/cmd.go
index 9c40acbc3c4b6098eb0b5b2690660e19e34c1fe3..3c1eece4182d0043dac025774d7718502795e43e 100644
--- a/cmd/cmd.go
+++ b/cmd/cmd.go
@@ -461,7 +461,7 @@ func New() *Cmd {
 		if httpAuthIPWhitelist := c.String("http-auth-ip-whitelist"); httpAuthIPWhitelist != "" {
 			ipFilterOptions := server.IPFilterOptions{}
 			ipFilterOptions.AllowedIPs = strings.Split(httpAuthIPWhitelist, ",")
-			ipFilterOptions.BlockByDefault = false
+			ipFilterOptions.BlockByDefault = true
 			options = append(options, server.HTTPAUTHFilterOptions(ipFilterOptions))
 		}