Firewall Ignore List

Exclude a trusted IP address from the intrusion monitor's automatic blocking.

Where to find it: Sign in as root, open Server > Firewall, then choose Firewall Ignore List.

Available to: Root only.

Before you start

Security settings can also block legitimate visitors. Start with a narrow rule or monitoring mode where available, then check that normal access still works.

Why use it — and when not to

Use Firewall Ignore List to reduce a specific, evidenced risk. Avoid broad blocks, global disables, or permanent exceptions when a monitor mode or narrower rule can solve the same problem.

How to use it

1. Confirm that the address should be excluded from automatic intrusion-monitor blocks.
2. Add the address with a comment explaining why it is trusted.
3. Check the firewall separately if the connection is still blocked.

Choosing the right IP list

Always allow and Always block are opposing policies. Temporary block has a duration. Ignore from auto-ban exempts a source from automatic intrusion bans; it is not a general instruction to open every port for that source.

Enter an exact IP or supported network, include a useful note, and verify which list now contains it. Unblock selected and Unblock All have different scope. Keep administrative sources reachable while testing.