DocumentationЗащитаFirewall

Firewall

IP, country and ASN filtering rules

The Firewall lets you manually allow or block traffic by IP address, country, and autonomous system (ASN).

Firewall rule evaluation order

IP Whitelist

Allowed IPs pass immediately

✓ pass

IP Blacklist

Blocked IPs are rejected

✗ block

Country filter

GeoIP check by ISO code

✗ block

ASN filter

Autonomous system check

✗ block

Passed all checks → connected to server

IP rules

You can add individual IPs or ranges in CIDR notation. The whitelist takes priority over the blacklist — if an IP is in both lists, it will be allowed.

Examples
# Whitelist — single IP
192.168.1.100

# Whitelist — /24 subnet (256 addresses)
10.0.0.0/24

# Blacklist — add via the panel with type "Block"

Country filter

You can block connections from specific countries using ISO codes (RU, US, CN, DE, etc.). This is a blunt instrument — only use it if you're certain your audience is from specific countries.

ASN filter

An ASN (Autonomous System Number) identifies a provider's network. If attacks are coming from a particular hosting provider, you can block its entire ASN.

Example
AS16276  — OVH (large host, often used by botnets)
AS14061  — DigitalOcean
AS24940  — Hetzner
Blocking ASNs of large providers may affect real players whose ISP uses the same ASN.
PreviousBot DetectionNextCaptcha