RdpGuard Whitelist and Blacklist

• Whitelist and Blacklist
• Add entries
• Edit or delete entries
• Import and export entries
• Allow changing IP addresses with DNS/DDNS

Whitelist protects trusted IP addresses and ranges from being blocked by RdpGuard. You can also add DNS or DDNS hostnames to allow their currently resolved IP addresses.

Blacklist permanently blocks specified IP addresses and ranges. These entries do not expire automatically.

To unblock an address and add it to the whitelist directly from the blocked-address list, see Unblock and Whitelist.

1. Click Tools, Whitelist or Tools, Blacklist.

   The Whitelist or Blacklist dialog will open:

   

2. Click Add. The Add whitelist entries dialog will open (Add IP addresses for the blacklist):

   

3. Enter one or more IP addresses, ranges or CIDRs, one per line. The whitelist also accepts DNS/DDNS hostnames. Add an optional comment, then click Add.

4. Click Save changes in the Whitelist or Blacklist dialog to apply your changes.

Select an entry and right-click it to open the context menu:

Edit: select an entry, click Edit, make your changes and click OK.

Delete: select one or more entries and click Delete.

Click Save changes in the Whitelist or Blacklist dialog to apply your changes.

Click More to access the import and export commands:

Import: click More, Import and choose a CSV or JSON file. Imported entries are added to the current list. Click Save changes to apply them.

Export: select entries, click More, Export, and choose TXT, CSV or JSON. Press Ctrl+A to select all entries.

Use JSON to transfer entries with comments between RdpGuard installations. TXT contains addresses or hostnames only.

If your public IP address changes, add a DNS or DDNS hostname that points to it, such as remote.example.net, to the whitelist and click Save changes.

The hostname must resolve to the IP address RdpGuard sees for incoming connections. If the computer connects through a router, this is usually the router's public IP. Enter only the hostname, without a URL, port or wildcard. Hostnames are supported only in the whitelist.

RdpGuard checks DNS every minute and updates the allowed IP addresses. DNS caching may delay changes.

If DNS resolution fails, the previous addresses remain allowed for up to 30 minutes after the last successful lookup. They then stop being allowed by that hostname.

Select the hostname and click Edit to view its allowed IP addresses and DNS status. The Edit whitelist entry dialog will open:

You can also manage whitelist entries through the command-line interface.