Server network
See the addresses players connect to, and control who is allowed to reach them.
The Network tab holds two protections: a country filter and per-port access rules. It is always available.
Allocations
An allocation is an IP address and a port together. Your server needs at least one.
At the top of the tab, a highlighted box shows the primary address. This is the address that players use. Click the copy button to put it on your clipboard.
Under the box, the tab lists every allocation on the server:
| Item | Meaning |
|---|---|
| Primary badge | The default connection address for players. |
| No badge | An additional port. Games use these ports for query traffic, RCON, and voice. |
| Note text | A short label that your administrator set on the allocation. |
Each row has a copy button. Rows that are not primary also have a Make Primary button. Click it to move the primary badge to that allocation. The change takes effect at once.
TIP
You cannot add or delete allocations from this tab. Your administrator adds ports to your server. Ask them if you need another port.
Country filter
The Geo filtering section blocks or allows connections by the country of the connecting IP address. The rule covers every port that the server uses.
When to use it
- Your server is for one region and you get constant connection attempts from other regions.
- You want to reduce the load from scanners and bot traffic.
- A single country produces most of your abuse reports.
How to set it up
- Tick Enabled.
- Select a mode. Block listed countries drops traffic from the countries in the list. Allow only listed drops traffic from every country that is not in the list.
- Type a country name or a two-letter code in the search box. Click a result to add it.
- Click the bin icon on a country to take it off the list.
- Click Save geo filter.
Nothing is saved until you click Save geo filter.
DANGER
Allow only listed blocks everybody outside your list, including you. A short list locks out most of your players. Add every country that your players connect from before you save.
What it cannot do
Be clear about the limits before you rely on this filter:
- The filter reads the IP address of the connection. A person who uses a proxy or a VPN in an allowed country still gets through.
- Country data for an IP address is a best estimate. Some addresses are placed in the wrong country, and mobile networks are often wrong.
- The rule covers all ports of the server together. You cannot block a country on one port only.
- The node needs a country dataset. Until the node has one, the filter allows all traffic.
- The filter stops connections. It does not stop a person who is already in the game.
Port access rules
The Port access rules section locks one port to a list of source IP addresses. Every other port stays open.
Use it for a port that only you need, such as an RCON port, a web admin port, or a query port.
How to set it up
- Find the port in the list. Each allocated port has its own row.
- Tick Restrict on that port.
- Type an IP address or a CIDR range, then click Add.
203.0.113.5and10.0.0.0/8are both valid. - To add the address that you are connected from now, click Allow my IP.
- Repeat for each address that needs access.
- Click Save port rules.
Only the listed addresses can reach that port. All other traffic to that port is dropped. Ports that you leave unticked stay open to everybody.
WARNING
If you tick Restrict and save with an empty list, the port stays open. The panel shows a note when the list is empty.
DANGER
Do not restrict the game port. Players connect from addresses that you cannot predict, so a restricted game port blocks them all.
Home connections change
Most home internet connections get a new IP address from time to time. If you lock a port to your home address, you lose access when your address changes. Come back to this tab and click Allow my IP again.
Node support
Port access rules work the same way on Linux nodes and on Windows nodes. The country filter also works on both.
Which control to use
| Goal | Control |
|---|---|
| Keep whole regions off the game port | Country filter, block mode |
| Serve one region only | Country filter, allow-only mode |
| Keep an admin port private | Port access rules |
| Stop one player | Ban the player in the game, not here |
Next steps
- Console to copy the address players connect to
- Server users to let somebody else change these settings
To add a port your server does not have, ask your host. Only an administrator adds ports to a node.
