Skip to main content

Granular Traffic Control


For advanced users or unique applications, Dataforest provides the ability to create manual filtering rules. You can define specific protocols, ports, and filtering engines to create a bespoke security perimeter for your service.
Reading TimeDifficultyLast Updated
5 minutesAdvancedJanuary 2026

Quick Navigation

SectionWhat You’ll Learn
Accessing FiltersFinding the “Apply Protection” modal
Rule Syntax & ConfigurationUnderstanding fields and toggles
TCP Filtering EnginesProtocol-specific validation logic
UDP Filtering EnginesProtocol-specific validation logic
Advanced OptionsPort ranges and IP List integration

Accessing Filters

To start creating custom rules:
  1. Log in to the Firewall Panel.
  2. Go to the IP Addresses tab and select your Dataforest IP.
  3. Click on the Filters tab in the secondary navigation.
  4. Click the Apply Protection button to open the configuration modal.
  5. Select the Apply Filter tab to access custom rule creation.

Rule Syntax & Configuration

The Apply Filter modal allows you to define exactly how traffic should be handled.
  • Protocol: Select from TCP, UDP, or ICMP.
  • Select Filter (Engine): Choose the specific validation logic (see lists below).
  • IP List (Optional): Apply the filter only to specific IP Lists (Whitelists/Blacklists).

TCP Filtering Engines

Dataforest provides specialized TCP engines for various applications:
  • General: any TCP application, drop TCP.
  • Gaming: AltV TCP, FiveM TCP (Light/Express/Strict), Garrys Mod TCP, Minecraft Java, Tibia.
  • Web & Infra: HTTP, SSH, TLS, txAdmin, Remote Desktop Protocol.
  • Other: Website Challenge Verified TCP, TeamSpeak Query and Filetransfer.

UDP Filtering Engines

UDP engines are optimized for high-performance game traffic:
  • General: any UDP application, drop UDP.
  • Valve Engine: Source Engine (CS2, TF2, GMod), Rust, DayZ, Arma 3.
  • Survival: ARK Survival Evolved, Palworld, SCP Secret Laboratory, Terraria.
  • Other Gaming: AltV UDP (Strict), FiveM UDP, Hurtworld, RakNet, SA:MP.
  • Infra/VOIP: OpenVPN, Plasma Voice, TeamSpeak Voice, Wireguard.

Advanced Options

Port Range Configuration

By default, you can specify a single port in the Port (Optional) field (e.g., 80).
  1. Toggle the Use port range switch on.
  2. Enter the Port Start (e.g., 10000).
  3. Enter the Port End (e.g., 20000).

Global Application

If you leave the port fields empty, the filter will be applied to all ports on your IP address for the selected protocol.

IP List Integration

If you have created specific IP Lists (such as a list of trusted staff IPs or known malicious proxies), you can select them in the IP List (Optional) dropdown. This allows you to apply a filter engine specifically to traffic coming from those lists.

Support Channels

If you are unsure which engine is best for your custom mod or application, reach out to our network team:

First Month Discount

Use code KB20 at checkout to get 20% off your first month of hosting!

Last Updated: January 2026 | Need Help? Contact our 24/7 support team!