Firewall

The Firewall Manager can be found under the advanced tab in the server menu. Here IPs can be blocked from accessing your server. A blocked IP here wont even be able to ping your server, its fully block from connecting, or pining the IP.

The Firewall manager also allows you to set access to set IPs. An example of where this might be useful is say you have a player stats web portal running from your server. You only want set people to be able to see this. You can lock down connections then allow your IP to connect.

You can also do this with servers. So is essential for when locking down and setting up a proxy/bungee network.

Priority

Before we just into blocking and allowing IPs, we'll first cover Priority. Priority is the order in which the firewall rules are applied. The higher the number, the higher the priority. So if you have a rule with a priority of 1, and a rule with a priority of 2, the rule with a priority of 1 will be applied first.

So if you want to block all connections, you would put this as a lower priority than your allow rules. This way the allow rules will be applied first, then the block all rule will be applied.

Blocking IP

To block an IP, enter the IP you wish to block into the remote IP box. Set the port to your main servers port, and change the type option to block.

Blocking All IPs

To block all IPs from connecting to your server. Put 0.0.0.0/0 into the remote IP box. Set the port to your main servers port, and change the type option to block.

Allowing IPs

To allow an IP to connect to your server, enter the IP you wish to allow into the remote IP box. Set the port to your main servers port, and change the type option to allow.

Example

If I wanted to block all IPs from connecting to my server, but allow my IP to connect. I would set the block all rule to a priority of say 2, and then allow rule to a priority of 1. This way the allow rule will be applied first, then the block all rule will be applied.