Firewall Blocklists

Use external lists of known unwanted IP addresses to help block abusive traffic.

Where to find it: Sign in as root, open Server > Firewall, then choose Firewall Blocklists.

Available to: Root only.

Before you start

Security settings can also block legitimate visitors. Start with a narrow rule or monitoring mode where available, then check that normal access still works.

Why use it — and when not to

Use Firewall Blocklists to reduce a specific, evidenced risk. Avoid broad blocks, global disables, or permanent exceptions when a monitor mode or narrower rule can solve the same problem.

How to use it

1. Review the configured sources and enable the lists you intend to use.
2. Refresh the lists and check for download or parsing errors.
3. Investigate an unexpected block before making a broad exception.

External feed refresh and scope

Each feed has a name, URL, and enabled state. The page separately controls global enablement, refresh interval, Save, and Update now. Use only feeds whose scope you understand; a broad network entry can block legitimate customers.

Check refresh results and the resulting policy after an update. Removing a feed source and unblocking an independently added manual deny entry are different tasks.