1. Home
  2. Knowledge Base
  3. WHM
  4. How to Allow or Block an IP Address Using CSF Firewall in WHM

How to Allow or Block an IP Address Using CSF Firewall in WHM

Last Reviewed: 04 November 2026
Published Date: 04 November 2026
Last Updated: 04 November 2026
Category: WHM / Server Security
Tested Version: WHM / cPanel with ConfigServer Security & Firewall (CSF)

Quick Answer

You can manage IP addresses through the ConfigServer Security & Firewall (CSF) interface in WHM. Navigate to WHM → ConfigServer Security & Firewall → CSF → Quick Actions to allow, block, ignore, or unblock an IP address.

Prerequisites

  • Access to WHM with an account that has permission to manage the firewall.
  • Valid WHM login credentials.
  • The IP address you want to manage.

Steps

  1. Log in to your WHM account.
  2. In the WHM search bar, enter firewall.
  3. Under the Tools section, click ConfigServer Security & Firewall.
  1. On the ConfigServer Security & Firewall page, select the CSF tab.
  2. Locate the CSF – Quick Actions section. The available actions are shown below.

Allow an IP Address

  • Provide the IP address you want to allow in the Allow IP address field.
  • Optionally, enter a comment in the Comment for Allow field.
  • Click Quick Allow.

The IP address is added to the CSF allow file (csf.allow).

Block an IP Address

  • In the Block IP address section, type the IP address.
  • In the Comment for Block section, you can optionally provide a comment.
  • Click Quick Deny.

The IP address is added to the CSF deny file (csf.deny).

Ignore an IP Address

  • Provide the IP address you want to exclude from LFD monitoring in the Ignore IP address field.
  • Click Quick Ignore.

The IP address is added to the CSF ignore file (csf.ignore), and LFD is restarted.

Unblock an IP Address

  • In the Remove IP address area, type the IP address you wish to have removed from the firewall block list.
  • Click Quick Unblock.

This removes the IP address from temporary and permanent firewall blocks.

Frequently Asked Questions (FAQs)

1.What happens when I allow an IP address?

    The IP address is added to the CSF allow list (csf.allow).

    2.What happens when I block an IP address?

      The IP address is added to the CSF deny list (csf.deny).

      3.What happens when an IP address is added to the Ignore list?

        The Allow option adds the IP address to the firewall allow list, whereas the Ignore option adds it to the CSF ignore list and restarts LFD.

        4.Does Quick Unblock remove an IP address from permanent blocks?

          The Quick Unblock option removes the IP address from temporary and permanent firewall blocks.

          5.Can I add a comment when allowing or blocking an IP address?

            Yes. The Allow and Block actions include optional comment fields where you can record the reason for the change.

            Summary

            You can manage IP addresses through WHM → ConfigServer Security & Firewall → CSF → Quick Actions. Always verify the IP address before allowing, blocking, ignoring, or unblocking it. If you need assistance, please contact Oryon Technical Support.

            Need Help with Microsoft 365? 

            Oryon provides Microsoft 365 licensing, email hosting, migration, mailbox administration, security configuration, and ongoing technical support for businesses in Singapore. 

            Related Articles

            Need Support?
            Can't find the answer you're looking for?
            Contact Support