Within the RSFirewall! Blocklist/Safelist area you can ban or add exceptions individual IP addresses.

In case you have detected a potential threat you can simply block the originating IP address, using the blocklist option. For each blocked IP you can even specify a reason this will be displayed to the visitor in question every time it tries to access your site.

Site administrators for example, don't need to be asked for additional passwords, or be checked against potential threats. With the Safelist option you can add such exceptions, e.g. not apply the RSFirewall! security features for a certain IP address.


Automated blocklisting can occur if the Automated blockisting is enabled within RSFirewall! > Configuration > Active scanner area. Read more on RSFirewall! Active scanner.


You can restrict access to groups or entire classes of IPs through the use of wildcards:

  • The * (asterisk) wildcard: replaces any number of characters. Example: 192.168.1.*. Addresses like, up to will be blocked. Use it for groups or classes of IPs.
IP Ranges

To specify an IP range, please use the - (dash) character, as in the following example: -

This means that all IPs found between and (,, ..., will be included in the blocklist / safelist.

CIDR Notations

To specify a CIDR notation, please use the / (slash) character, as in the following example:

This translates into a class of IPs ranging from to (,, ..., that will be added to the blocklist / safelist.

Was this article helpful?

Yes No
Sorry about that