Permanent Deny

Block an IP address until you decide to remove the block.

Where to find it: Sign in as root, open Server > Firewall, then choose Permanent Deny.

Available to: Root only.

Before you start

Security settings can also block legitimate visitors. Start with a narrow rule or monitoring mode where available, then check that normal access still works.

Why use it — and when not to

Use Permanent Deny to reduce a specific, evidenced risk. Avoid broad blocks, global disables, or permanent exceptions when a monitor mode or narrower rule can solve the same problem.

How to use it

1. Enter the IP address or network you want to block.
2. Add a comment so you can identify the reason later.
3. Check the entry and remove it when the block is no longer needed.

Choosing the right IP list

Always allow and Always block are opposing policies. Temporary block has a duration. Ignore from auto-ban exempts a source from automatic intrusion bans; it is not a general instruction to open every port for that source.

Enter an exact IP or supported network, include a useful note, and verify which list now contains it. Unblock selected and Unblock All have different scope. Keep administrative sources reachable while testing.