Firewall
IP allow list
A list of trusted internet addresses, such as your office, that Stack Guard's blocking features never stop.
What it does
Addresses on the list skip bans, country blocking, custom firewall rules and brute force lockouts. They are also never looked up for IP reputation.
Why it matters
Strict protection is safest when you know it can never lock out the people who run the site. The allow list is that guarantee.
Set it up
- Go to the Firewall tab, section Allow list, and switch on IP Whitelist.
- Click Add my IP to add the address you are using now, or type addresses in Whitelisted IPs, one per line.
- You can add a range like
203.0.113.0/24, and a note after a#, for example198.51.100.7 # office. - Click Save Changes.
Good to know
Home internet addresses often change. Check the Your connection panel on the Firewall tab to see whether your current address is on the list.
Only add addresses you control. Anyone sharing an allowed address, such as on a café network, is trusted too.
With the switch off, the list is kept but ignored.
Which plan includes it
The allow list is in every plan.
How it works, for developers
- Format: one address or CIDR range per line;
#starts a comment. Ranges written as two addresses with a dash are not supported. - Settings:
smg_ip_whitelist_enabled,smg_ip_whitelist. Both are left out of settings exports on purpose, so one site's trusted addresses are never copied to another. - The visitor address used for matching comes from the Real visitor IP setting.
Quick answers about ip allow list
What does IP allow list do in Stack Guard?
Addresses on the list skip bans, country blocking, custom firewall rules and brute force lockouts. They are also never looked up for IP reputation.
Why use ip allow list on a WordPress site?
Strict protection is safest when you know it can never lock out the people who run the site. The allow list is that guarantee.
How do I set up ip allow list?
1. Go to the Firewall tab, section Allow list, and switch on IP Whitelist. 2. Click Add my IP to add the address you are using now, or type addresses in Whitelisted IPs, one per line. 3. You can add a range like 203.0.113.0/24, and a note after a #, for example 198.51.100.7 # office. 4. Click Save Changes.
Which Stack Guard plan includes ip allow list?
The allow list is in every plan.
More in Firewall
- BansBlocks a specific internet address, a whole range of addresses, or a kind of software from your entire site, for a set time or for good.
- Real visitor IP (trusted proxy)Tells Stack Guard how to find a visitor's real internet address when your site sits behind Cloudflare, a load balancer or another proxy.
- Country blockingBlocks visitors from the countries you choose, or allows only the countries you choose, using a country database stored on your own server.
- Custom firewall rulesYour own if-this-then-that rules for incoming requests: block, allow or just log requests that match a page address, a browser name, a visitor address and more.
Not running Stack Guard yet? It is free.
Download Free