Security: blocked IPs & countries

Under Monitoring, three pages control who can even reach the system: Blocked IPs, Blocked countries and Whitelist.

Blocked IPs

In the sidebar, go to Monitoring > Blocked IPs. This is the blacklist of IP addresses currently blocked, per server — including addresses fail2ban has blocked automatically after repeated failed logins, alongside any address blocked by hand.

Field	Meaning
`IP address`	The address to block.
`Server`	One server, or All servers.
`Reason / chain`	A note — for a fail2ban entry, this is where the reason it was auto-blocked appears.

Blocked countries

In the sidebar, go to Monitoring > Blocked countries. Calls from the selected countries are blocked outright, shown on a world map with a region tab (Europe, Asia, Africa, …) and a per-country search.

Note

Not all countries can be blocked at the same time — the product keeps at least some reachable so the install itself does not lock everyone out.

Whitelist (trusted IPs)

In the sidebar, go to Monitoring > Whitelist. Addresses and networks entered here are never blocked — neither by fail2ban nor by the blocked-countries list. Manual only, never automatic.

Whitelist page with an IP address / CIDR field, a Comment field, an Add to whitelist button, and an empty list saying No entries — nothing is exempt from the blocks. — Whitelist: IPs and networks that are always let through.

A typical use: the fixed IP of a call centre or office, so that one employee's failed login does not lock out the whole building.

Check

Open Blocked IPs after a real lockout to see whether fail2ban already caught it; before travelling, check Blocked countries if calls from a new country stop connecting.