Site firewall rules
See every website's firewall rules, edit any of them, and import the country list that country blocking uses.
Site firewall rules shows the websites whose owners set Firewall rules and lets you change the rules of any website.
Where: Server Admin › Security › Site firewall rules
Websites with firewall rules
Each row shows what is on: allowed and blocked addresses, Allowed addresses only, blocked countries, the login limit and bot protection. Click Edit to open the same editor the customer has. To open a website that has no rules yet, search for it under Open a website.
Country list
Country blocking needs a list of address ranges with their countries. Import it as a CSV file:
| Column | Example |
|---|---|
| an address range in CIDR form | 203.0.113.0/24 |
| or the first and last address | 203.0.113.0,203.0.113.255 |
| a two-letter country code | GB |
A header row and rows without a country code are skipped; first–last ranges become CIDR ranges. Any free country database in this form works. Click Import: the list goes to every server, Nginx tests it and reloads. Empty removes the list (country blocking then blocks nobody).
Tip: import a fresh list now and then; address ranges move between countries over time.