Брандмауер
Керуйте правилами брандмауера для вашого сервера
Брандмауер вимкнено
Трафік не фільтрується
—
Дозволено
—
Заблоковано
—
Активні з’єднання
—
Унікальні джерела
—
Країни
Правила
Захист від DDoS
Захист не активовано
Підключення та загальне
Зберігати підключенняДозволити встановлені підключення
Недійсні пакетиСкидати пошкоджені пакети
Захист від фрагментаціїСкидати фрагментовані пакети
Відстеження за джереломВідстежувати ліміти за IP
Захист від флуду
SYN-флудФлуд TCP-підключень
ACK-флудФлуд TCP ACK-пакетів
UDP-флудФлуд UDP-пакетів
What does the firewall do?
The firewall controls which traffic can reach your server, helping protect against connection floods, port scanners, and DDoS attacks. You can allow or drop specific IPs and CIDR ranges, set connection rate limits, and enable multi-layered DDoS protection.
How do I enable the firewall?
On the Firewall page, turn on the Firewall Enabled toggle, choose a Default Action (Allow or Drop), and click Sync Firewall to apply. Be careful: a Default Action of Drop blocks all traffic that does not match an Allow rule, so add your Allow rules first to avoid locking yourself out.
How do I block an IP address?
Open the IP Rules tab, click Add Rule, enter the source IP address or CIDR range, set the direction, choose Drop as the action, optionally add a description, and save. Rules do not take effect until you click Sync Firewall.
What is rate limiting?
Rate limiting caps how many connections a single IP can make, which helps stop flooding. You can set Connections per Second (1–10,000, default 50) and Burst Size (1–1,000, default 100), or use a preset: Light (100/150), Medium (50/100), or Strict (25/50). Medium is a good starting point for most servers.
How does DDoS protection work?
The DDoS Protection tab offers layered defenses you can toggle on, with configurable thresholds for SYN, ACK, UDP, and ICMP floods. Tune the UDP thresholds carefully on game servers, which rely heavily on UDP — settings that are too strict can drop legitimate player traffic.
What is the difference between Drop, Reject, and Allow?
Drop silently discards traffic with no reply (recommended, since it reveals nothing to an attacker). Reject blocks the traffic but sends back a rejection. Allow lets matching traffic through. Apply your changes with Sync Firewall after editing the rules.