> ## Documentation Index
> Fetch the complete documentation index at: https://help.freakhosting.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Apply DDoS Filters to Your IP Address

> Protect your game server, website or app by applying a ready-made filter profile or a single DDoS filter to your IP address in the FREAKHOSTING Firewall Panel.

Filters tell the DDoS protection what real traffic looks like for your game or app, so attack traffic can be dropped. You can apply a **profile** (a ready-made set of filters for a popular game or app) or add a **single filter** for one port.

> **Difficulty**
>
> Beginner to Intermediate

> **Time**
>
> 5 minutes

***

## Before you start

* Know which game or app runs on the IP, and which **port** it uses. You can find the port in your game panel or server settings.
* Changes are pushed to the protection network **immediately**. There's no separate save step.

***

## Open your IP's filters

**1. Go to My IP addresses**

In the sidebar, click [My IP addresses](https://network.freakhosting.com/network).

**2. Click Manage**

Find your IP and click **Manage** (the funnel icon). You can also click **Manage** next to the IP on the Dashboard.

**3. Check the active filters**

The IP's page opens on **Overview**. The **Active filters** table lists the filters already on the IP. A new IP shows **No filters applied**.

![IP overview page showing an Active badge, Active filters via DataForest, an Add filters button, the message No filters applied, and IP facts with Port ranges Yes and IP lists Yes](https://mintcdn.com/freakhostingltd/0pHRhrSyr8uIxHTc/images/firewall/ip-overview-empty.png?fit=max\&auto=format\&n=0pHRhrSyr8uIxHTc\&q=85\&s=6e49541abd0282ebdaa8229d18bc9046)

An IP with no filters yet

***

## Apply a ready-made profile

A profile is the fastest way to protect a popular game or app. It adds the right filters on the usual ports in one click.

**1. Click Add filters**

At the top right of the IP's page, click **+ Add filters**. The **Apply profile** tab opens.

**2. Choose a profile**

Click the profile that matches your game or app. Each profile shows how many filters it adds.

![Add filters dialog with Apply profile and Single filter tabs and a grid of profiles such as 7 Days to Die, HTTP, DayZ, Pterodactyl, TeamSpeak 3, SSH and Minecraft Java, each with a filter count](https://mintcdn.com/freakhostingltd/0pHRhrSyr8uIxHTc/images/firewall/add-filters-profiles.png?fit=max\&auto=format\&n=0pHRhrSyr8uIxHTc\&q=85\&s=22368d124feddf10077a227a7d1fbd0e)

The Apply profile tab

**3. Apply it**

Click **Apply profile**. The filters appear in the **Active filters** table straight away.

> [!NOTE]
>
> Applying a profile **adds** its filters to any filters already on the IP. It doesn't remove them. To start again, [remove the old filters](#remove-filters) first.

### Available profiles

| Profile | Filters | Best for |
| - | - | - |
| 7 Days to Die | 1 | 7 Days to Die servers |
| ARK: Survival Evolved | 3 | ARK servers |
| Arma 3 | 2 | Arma 3 servers |
| Block port 25 | 1 | Blocking traffic on mail port 25 (SMTP) |
| DayZ | 3 | DayZ servers |
| FiveM (Default) | 3 | Most FiveM servers, including txAdmin |
| FiveM (Light) | 3 | Modded or development FiveM servers |
| FiveM (Ultra Strict) | 3 | FiveM servers under heavy attack (the most restrictive) |
| Garrys Mod | 2 | Garry's Mod servers |
| HTTP | 1 | Websites on port 80 |
| HTTPS | 1 | Websites on port 443 |
| Hurtworld | 2 | Hurtworld servers |
| Killing Floor 2 | 1 | Killing Floor 2 servers |
| Minecraft Bedrock | 1 | Minecraft Bedrock servers (RakNet) |
| Minecraft Java | 1 | Minecraft Java servers (TCP 25565) |
| OpenVPN | 1 | OpenVPN servers |
| Palworld | 2 | Palworld servers |
| Pterodactyl | 3 | Pterodactyl game panel nodes |
| Remote Desktop (RDP) | 1 | Windows Remote Desktop |
| Rust | 4 | Rust servers |
| SA:MP | 1 | San Andreas Multiplayer servers |
| SCP: Secret Laboratory | 1 | SCP: Secret Laboratory servers |
| Source Engine | 1 | Source games such as CS, TF2 and Garry's Mod |
| Squad | 2 | Squad servers |
| SSH | 1 | SSH access on TCP 22 |
| TeamSpeak 3 | 3 | TeamSpeak 3 servers |
| Tibia | 1 | Tibia servers |
| WireGuard | 1 | WireGuard VPN servers |

> [!TIP]
>
> Running several things on one IP, such as a game server and SSH? Apply one profile for each. The filters are added together.

> [!WARNING]
>
> Profiles use each game's **default port**. If your server uses a different port, [add a single filter](#add-a-single-filter) with your port instead.

***

## Add a single filter

Use a single filter when there's no profile for your game, when you use a non-standard port, or when you want to filter only certain addresses.

**1. Open the Single filter tab**

Click **+ Add filters**, then the **Single filter** tab.

![Single filter tab with Filter, Protocol, Use port range, Port and IP list (optional) fields and Cancel and Add filter buttons](https://mintcdn.com/freakhostingltd/0pHRhrSyr8uIxHTc/images/firewall/add-single-filter.png?fit=max\&auto=format\&n=0pHRhrSyr8uIxHTc\&q=85\&s=e5d43d6fc2739028bd035ec37026c395)

The Single filter tab

**2. Choose the protocol**

Pick **TCP**, **UDP** or **ICMP**. Your game or app's documentation tells you which one it uses. Many games use UDP for gameplay and TCP for queries or web panels.

**3. Choose the filter**

Open the **Filter** list and pick the filter for your game or app. Type to search. The list changes depending on the protocol you chose.

**4. Enter the port**

Type the port your service uses, for example `443`. To cover several ports in a row, see [Use a port range](#use-a-port-range).

**5. Choose an IP list (optional)**

Leave **IP list** empty to apply the filter to everyone. See [Use an IP list](#use-an-ip-list) for when to pick one.

**6. Add the filter**

Click **Add filter**. The filter appears in **Active filters** straight away.

### Which filter should I choose?

| Protocol | Examples of available filters |
| - | - |
| **TCP** | HTTP, HTTP SYN Proxy, TLS (and TLS Strict), SSH, FTP, Remote Desktop Protocol, Minecraft Java (Strict and Challenge versions too), FiveM TCP, txAdmin, Website Challenge Verified TCP, TeamSpeak Query and Filetransfer, Garrys Mod TCP, AltV, Tibia, Metin2 |
| **UDP** | FiveM UDP, RakNet (Minecraft Bedrock), ARK and ASA, DayZ, Palworld, Squad, Arma3, SCP SL, TeamSpeak 3, Source Engine and A2S, CS:GO, L4D2, Factorio, The Isle, Path of Titans, Hurtworld, SA:MP, MTA, AltV, OpenVPN, WireGuard, NTP, DNS |
| **ICMP** | allow ICMP, drop ICMP |

Every protocol also has general filters:

| Filter | What it does |
| - | - |
| **any TCP application** / **any UDP application** | General protection for an app without its own filter. |
| **protection bypass TCP** / **protection bypass UDP** | Lets all traffic on the port through without filtering. Use only if a filter breaks your app, and only for trusted traffic. |
| **drop TCP** / **drop UDP** | Blocks all traffic of that type on the port. |
| **allow ICMP** / **drop ICMP** | Lets ping through, or blocks it. |

> [!TIP]
>
> Filters marked **Strict** or **Challenge** are tougher on attack traffic but may block some unusual real connections. Start with the standard filter and switch to a stricter one if attacks get through.

> [!WARNING]
>
> The **txAdmin** and **Website Challenge Verified TCP** filters ask each visitor to verify at [network-verify.freakhosting.com](https://network-verify.freakhosting.com/) before they can connect. Tell your players about this before you turn them on.

### Use a port range

Some services listen on several ports in a row, such as 27015 to 27020.

**1. Tick Use port range**

In the **Single filter** tab, tick **Use port range**. The **Port** field changes to **From** and **To**.

**2. Enter the range**

Type the first port in **From** and the last port in **To**, then click **Add filter**.

![Single filter tab with Use port range ticked and From and To port fields](https://mintcdn.com/freakhostingltd/0pHRhrSyr8uIxHTc/images/firewall/single-filter-port-range.png?fit=max\&auto=format\&n=0pHRhrSyr8uIxHTc\&q=85\&s=37563ae1771e85f5ce38d2e17783931c)

A filter that covers a range of ports

### Use an IP list

An [IP list](https://help.freakhosting.com/portals/firewall/how-to-create-and-manage-ip-lists.md) lets a filter treat some addresses differently. For example, you can whitelist your office or another server you own.

> [!NOTE]
>
> IP lists are available on IP addresses protected by DataForest. Check the **IP facts** box on your IP's page: if **IP lists** isn't supported, this option isn't available for that IP.

**1. Create the list first**

[Create an IP list](https://help.freakhosting.com/portals/firewall/how-to-create-and-manage-ip-lists.md#create-an-ip-list) and add your addresses to it.

**2. Pick the list**

In the **Single filter** tab, open **IP list (optional)** and pick your list. Each list shows its name and a **Remote ID**.

**3. Add the filter**

Click **Add filter**. The list name appears in the **Source/IP list** column.

![Single filter tab with the IP list drop-down open showing a list name and its Remote ID](https://mintcdn.com/freakhostingltd/0pHRhrSyr8uIxHTc/images/firewall/single-filter-ip-list.png?fit=max\&auto=format\&n=0pHRhrSyr8uIxHTc\&q=85\&s=b1837a63e4bc4a052e01adf3e7ba1b9b)

Choosing an IP list for a filter

***

## Read the Active filters table

![Active filters table listing Minecraft Java on TCP 25565, SSH on TCP 22 and TLS on TCP 443 with Docs Test List as the source](https://mintcdn.com/freakhostingltd/0pHRhrSyr8uIxHTc/images/firewall/ip-overview-filters.png?fit=max\&auto=format\&n=0pHRhrSyr8uIxHTc\&q=85\&s=807f03fd1167275c8c05807907cd89fe)

An IP with three active filters

| Column | Meaning |
| - | - |
| **Filter ID** | The filter's reference number. |
| **Protocol** | TCP, UDP or ICMP. |
| **Port/Range** | The port or range of ports the filter covers. |
| **Rule** | The filter in use, such as Minecraft Java or SSH. |
| **Source/IP list** | The IP list the filter uses, if any. |

The **Active filters** chip at the top shows how many filters the IP has. Click the refresh icon to load the latest list.

***

## Remove filters

### Remove one filter

**1. Click the bin icon**

In **Active filters**, click the bin icon at the end of the filter's row.

**2. Confirm**

Click **Remove filter**. The change is pushed to the provider immediately.

![Remove filter dialog saying the change is pushed to the provider immediately, with Cancel and Remove filter buttons](https://mintcdn.com/freakhostingltd/0pHRhrSyr8uIxHTc/images/firewall/remove-filter.png?fit=max\&auto=format\&n=0pHRhrSyr8uIxHTc\&q=85\&s=1ef0bd2734e95943eeed5ad7a8b350ba)

Removing a single filter

### Remove several filters at once

**1. Select the filters**

Tick the box next to each filter you want to remove. To select them all, tick the box in the table header.

**2. Click Remove selected**

Click **Remove selected**. The button shows how many filters you picked.

**3. Confirm**

Type `remove` in the box, then click the **Remove** button to confirm.

![Remove selected filters dialog asking you to type remove to continue](https://mintcdn.com/freakhostingltd/0pHRhrSyr8uIxHTc/images/firewall/remove-selected.png?fit=max\&auto=format\&n=0pHRhrSyr8uIxHTc\&q=85\&s=0b04e10df8c5a8ec155376c1ab1108fa)

Confirming the removal of several filters

> [!WARNING]
>
> Removing filters can leave your service less protected. If you're changing setups, add the new filters straight after removing the old ones.

***

## Troubleshooting

> **Players can't connect after I added a filter**
>
> Check that the **port** and **protocol** match your server. If they do, try the standard version of the filter instead of a Strict or Challenge one. If you used **txAdmin** or **Website Challenge Verified TCP**, players must verify at [network-verify.freakhosting.com](https://network-verify.freakhosting.com/) first.

> **There's no profile or filter for my game**
>
> Use **any UDP application** or **any TCP application** on your game's port. If you're not sure which to pick, [open a ticket](https://freakhosting.com/clientarea/submitticket.php) and tell us the game and port.

> **I applied the wrong profile**
>
> Tick the filters it added, click **Remove selected**, then apply the correct profile.

> **My IP isn't listed**
>
> Sign out and sign back in. New and upgraded services appear after you sign in again. The panel covers services in the United Kingdom, Germany, Dallas, Ashburn, Romania and Poland.

***

## Related articles

> **[Configure IP settings](https://help.freakhosting.com/portals/firewall/how-to-configure-ip-settings.md)**
>
> Set the default action and block countries or networks.

> **[Create IP lists](https://help.freakhosting.com/portals/firewall/how-to-create-and-manage-ip-lists.md)**
>
> Whitelist or blacklist addresses.

> **[Analyse attack logs](https://help.freakhosting.com/portals/firewall/how-to-analyze-attack-logs.md)**
>
> See attacks against your IP addresses.

> **[Get alerts](https://help.freakhosting.com/portals/firewall/how-to-configure-firewall-notifications.md)**
>
> Know when a filter changes or an attack starts.

***

> [!NOTE]
>
> ### Need Extra Help?
>
> If you encounter any issues, our support team is ready to assist:
>
> * **Live Chat:** Quick assistance via our website.
> * **Support Ticket:** [Open a Ticket](https://freakhosting.com/clientarea/submitticket.php)
> * **Discord:** [Join our Community](https://discord.gg/freakhosting)
> * **Email:** [support@freakhosting.com](mailto:support@freakhosting.com)

> [!TIP]
>
> ### Save on Your Hosting
>
> Ready to upgrade your hosting? Use code **KB20** at checkout for **20% off** your first order!

***

**Last Updated:** October 2026


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.