Firewall Allow List

Allow a trusted IP address through the firewall.

Where to find it: Sign in as root, open Server > Firewall, then choose Firewall Allow List.

Available to: Root only.

Before you start

Security settings can also block legitimate visitors. Start with a narrow rule or monitoring mode where available, then check that normal access still works.

Why use it — and when not to

Use Firewall Allow List to reduce a specific, evidenced risk. Avoid broad blocks, global disables, or permanent exceptions when a monitor mode or narrower rule can solve the same problem.

How to use it

1. Check the public IP address that should be trusted.
2. Add it to the allow list with a useful comment.
3. Test access from that address and check other access restrictions if it still fails.

Choosing the right IP list

Always allow and Always block are opposing policies. Temporary block has a duration. Ignore from auto-ban exempts a source from automatic intrusion bans; it is not a general instruction to open every port for that source.

Enter an exact IP or supported network, include a useful note, and verify which list now contains it. Unblock selected and Unblock All have different scope. Keep administrative sources reachable while testing.