The tdatIPFilters object is a type of tdatContainer object with the cn=ipfilters, and must be a child of a tdatSystem object. A tdatIPFilters container holds individual tdatIPFilter objects. You can use as many tdatIPFilters objects as needed, but only one appearance is typical.