Access is only allowed via internal domains