Firewall

The firewall checks every verification attempt and decides whether that person gets in. It can block VPNs, alt accounts, mobile connections, specific users, IPs, countries, networks, email domains or members of other servers, and it can require a password. It lives on your server's Firewall tab, which has three sub-tabs: Rules, Passwords and Activity Logs.

Go to Servers › Manage › Firewall Go to Firewall › Rules Go to Firewall › Passwords Go to Firewall › Activity Logs

Firewall guidesCopy Anchor Link

This page is the overview. Each guide below covers one part of the firewall in depth.

What the firewall doesCopy Anchor Link

The firewall runs at the moment someone verifies. A member who is blocked sees an error on the verify page and never receives the verified role. Each verification attempt is checked in this order:

1. Active bypass. A member with a bypass skips every check below.
2. Firewall rules you created or imported.
3. Protections: VPN/proxy, wireless and alt-account blocking.
4. Server password, when one is required.
5. Captcha, when it is turned on.
6. Alt detection: whether this person already verified in this server with another account.
7. Minimum account age, when it is set.

Plan requirementsCopy Anchor Link

The firewall needs Premium or higher. Some features need a higher plan; each plan includes everything from the plans below it. See Plans & Billing for the full comparison, and each firewall guide for the plan details of its own features.

Teammates you add as sub-users need the Manage Firewall permission to open this tab.

ProtectionsCopy Anchor Link

Protections are one-click templates at the top of the Rules sub-tab. When one is on, its card shows ENABLED.

Block VPNs & ProxiesCopy Anchor Link

Block VPNs & Proxies (Premium) blocks anyone who tries to verify through a VPN, proxy or hosting network, and they see error 990044. See Block VPNs and Proxies for how detection works, false positives and how to let one member through.

Go to Firewall › Block VPNs & Proxies

Block Wireless ConnectionsCopy Anchor Link

Block Wireless Connections (Enterprise) blocks verification from mobile networks such as LTE, 4G and 5G, and members see error 990043. See Block mobile data for false positives and bypasses.

Go to Firewall › Block Wireless Connections

Block Alt AccountsCopy Anchor Link

Block Alt Accounts (Premium) stops one person from verifying with more than one Discord account, and blocked members see error 990045. Alt detection isn't perfect, so see Alt Account Detection for how to start with warnings before you block.

Go to Firewall › Block Alt Accounts

Enforce PasswordsCopy Anchor Link

Enforce Passwords (Enterprise) makes every member enter a verification password before they can verify. See Turn on Enforce Passwords for setup and what members see.

Go to Firewall › Enforce Passwords

Custom rulesCopy Anchor Link

Click Add Security Rule to open the template picker, then choose Custom Rule (Premium). Each rule reads If field, operator, value then decision, and a live preview shows it as a sentence while you build it.

Go to Firewall › Add Security Rule Go to Firewall › Custom Rule

The rule name is optional and can be up to 100 characters. A few examples:

• If Country is a country you don’t serve then block.
• If Server membership contains a rival server's ID then block. This needs Business or higher, and members of that server see error 990046.
• If Email domain contains a disposable mail provider then block.
• If User ID is a staff member’s ID then bypass all checks and give role Staff.

Import your ban listCopy Anchor Link

Import banlist from Discord Server (Premium, inside Add Security Rule) turns everyone banned from your Discord server into a block rule. See Import Discord Bans for the bot permission it needs, its limits and how to keep the list up to date.

Go to Firewall › Import Banlist

Managing rulesCopy Anchor Link

The Firewall Rules list groups your rules by decision. Each rule can be edited, enabled or disabled, or deleted. Use Filter rules by type to show only All Rules, Blocked, Password required, Allowed or Bypass all checks.

Go to Firewall › Firewall Rules Go to Firewall › Filter rules by type

A member stopped by a block rule sees error 990031. To remove a blocked user, see Remove an imported user.

Verification passwordsCopy Anchor Link

Passwords (Enterprise) live on the Passwords sub-tab. Use them with Enforce Passwords, with require password rules, or as a code that lets trusted people through. See Password-Protected Verification for creating passwords, limits and expiry, rotation and what members see.

Go to Firewall › Passwords

Activity logsCopy Anchor Link

The Activity Logs sub-tab records every firewall decision and shows totals for requests, allowed, denied and password-used attempts over the last 30 days.

Go to Firewall › Activity Logs

For the entries each check writes, see the logs sections for VPN blocking, alt detection and passwords. For charts over a longer period, open the Firewall tab under Analytics.

Go to Analytics › Firewall

BypassesCopy Anchor Link

A bypass is a temporary pass that lets one member verify without any firewall checks, including rules, VPN, alt and wireless blocking, passwords and account age. It is the quickest fix for a false positive. You can grant one in three ways:

• In Discord, run /bypass grant <user> <duration> [reason].
• In Discord, right-click the user → Apps → RC - Bypass.
• In the dashboard, click Grant Temporary Access on a denied entry in the activity logs.

Durations are 15 minutes, 1 hour, 6 hours, 24 hours or 7 days, and each user can have only one active bypass at a time. Use /bypass list to see active bypasses and /bypass revoke <user> to end one early. Staff who use the Discord commands need the User Bypass permission; see Bot Commands.

For someone who needs to get through every time, a custom rule on their User ID with the decision bypass all checks works until you delete it.

Allowing staff on VPNsCopy Anchor Link

If a staff member has to use a VPN, you don't need to turn VPN blocking off for everyone. Give them a User ID rule or a temporary bypass instead; see Allow a member through for which option skips which checks.

Related settingsCopy Anchor Link

These settings live outside the Firewall tab but also decide who can verify.

FAQCopy Anchor Link

Next stepsCopy Anchor Link