IP Lists (Allow / Block)
The IP Lists tab has two cards:
- Whitelist (Allow): addresses that are always allowed
- Blacklist (Block): addresses that are always blocked
Open it from Security > Firewalls > your firewall > IP Lists.
Add an address
- In the card you want, type one address (
1.2.3.4) or a range in CIDR notation (10.0.0.0/8). - Click the + button.
- The entry appears in the card. Click the X next to it to remove it.
Each entry becomes an allow or block rule in the Rules tab, with the next free number. The cards show No whitelist rules or No blacklist rules while they are empty.
| Whitelist examples | Blacklist examples |
|---|---|
Your own admin IP, 203.0.113.10 | An address that keeps attacking you, 198.51.100.5 |
Your office network, 198.51.100.0/24 | A whole range you want gone, 192.0.2.0/24 |
CIDR in one minute
| CIDR | Addresses covered |
|---|---|
1.2.3.4/32 or 1.2.3.4 | One address |
1.2.3.0/24 | 256 addresses, 1.2.3.0 to 1.2.3.255 |
10.0.0.0/8 | About 16.7 million addresses |
For a single ban, one address is what you want. Use ranges only when you are sure the whole range is hostile.
Order
Rules are applied by number, lowest first, and the first one that matches decides. An allow entry only wins over a country block or another block rule if its number is lower. Check the # column in the Rules tab.
✦
Allow your own IP first
Before tightening the firewall, add your own IP to the whitelist. An early allow rule keeps you from locking yourself out with a country or block rule.
!
Careful with large ranges
Blocking `0.0.0.0/0` or a `/8` cuts off a huge part of the internet, players included.
Game protection
The IP lists of a game protection cannot be changed from the panel. Open a ticket with the addresses to allow or block.