--- loncom/auth/lonipcheck.pm	2008/09/05 17:43:31	1.1
+++ loncom/auth/lonipcheck.pm	2017/12/22 02:00:53	1.2
@@ -1,5 +1,5 @@
 # Checks IP access settings - disable subsequent PerlHandlers if client IP blocked
-# $Id: lonipcheck.pm,v 1.1 2008/09/05 17:43:31 raeburn Exp $
+# $Id: lonipcheck.pm,v 1.2 2017/12/22 02:00:53 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -51,6 +51,10 @@ sub handler {
     if (&Apache::lonnet::allowed('bre',$r->uri) eq 'F') {
 	return DECLINED;
     }
+    if (($r->uri =~ /ext\.tool$/) &&
+        (&Apache::lonnet::EXT('resource.0.gradable',$env{'request.symb'}) =~ /^yes$/i)) {
+        return DECLINED;
+    }
     my ($status,$msg)=&ip_access_check();
     if ($status ne 'OPEN') {
 	$r->set_handlers('PerlHandler'=>undef);