Security Settings

The Security Settings page provides network-level and policy-level controls to protect your QuickBox Pro server. It is organized into four tabs: Settings for username and IP policies, Firewall Rules for viewing active firewall state, Geo-Lock for restricting streaming access by country, and Geo-Block for blocking dashboard access from specific countries.

Overview

Settings tab

The Settings tab contains two sections for managing username restrictions and network enforcement.

Disallowed usernames

Maintain a list of usernames that are blocked from registration. This prevents users from registering with names that could be confused with system accounts or admin identities.

• Add usernames to the disallowed list one at a time
• Usernames are matched case-sensitively — add entries in lowercase for best coverage
• Both the dashboard and the CLI enforce the disallowed list during user creation

Network enforcement

The network enforcement section lets you manually block IP addresses or CIDR ranges at the firewall level:

• Add a block — Enter an IP address or CIDR range, provide a reason, and select a duration
• Rollback safety — When you add a manual block, a 30-second countdown begins. You must click Confirm before the timer expires, or the block is automatically rolled back. This prevents accidental lockouts
• Duration options — 30 minutes, 2 hours, 24 hours, or permanent

Firewall Rules tab

The Firewall Rules tab provides a read-only view of all active iptables rules on your server. Rules are classified by origin so you can quickly identify where each rule came from:

You can filter rules by origin using the tab bar, search across all rule fields, and delete individual QuickBox or Geo Policy rules. Bulk selection and deletion is also supported.

Rules that have expired or been rolled back appear faded in the list to distinguish them from active rules.

Geo-Lock tab

Geo-Lock restricts streaming sessions to specific countries. It operates as an allowlist — only sessions originating from countries you specify are permitted to continue. Sessions from other countries are terminated.

This feature is part of the Streaming Dashboard and applies to Emby and Jellyfin streaming sessions, not general dashboard access. Use Geo-Lock when you want to ensure media streaming only happens from expected locations.

Geo-Block tab

Geo-Block restricts dashboard access by country. It operates as a blocklist — requests from countries you specify are blocked at both the application level and the network level.

How Geo-Block works

1. Select the countries you want to block
2. Click Apply Rules to enable enforcement
3. When a request arrives from a blocked country, it is rejected at the application level and the IP is added to the firewall automatically
4. Subsequent requests from that IP are blocked at the network level (kernel-level iptables) before reaching the application

Managing Geo-Block

• Country selection — Choose countries from the list to add to the blocklist
• Exempt IPs — Add specific IP addresses or CIDR ranges that should bypass geo-blocking (useful for VPNs or trusted proxies)
• IP test tool — Test any IP address to see if it would be blocked by your current configuration
• Enable/disable — Toggle enforcement on or off. Disabling does not immediately remove existing firewall rules — they expire naturally

Geo-Lock vs Geo-Block

Both features use the same geolocation service to determine a visitor’s country based on their IP address. Private and local network addresses are always allowed regardless of either policy.

CLI equivalents

Best practices

FAQ

Related pages