How to Unblock or Whitelist an IP in ConfigServer Security and Firewall?

Updated: 11 October 2026 · Applies to: ConfigServer Security & Firewall (CSF) on cPanel servers

ConfigServer Security & Firewall (CSF) blocks IP addresses that fail too many logins. If you or a customer is blocked, remove the block and, if the address is trusted, allow it permanently.

In WHM

1. Log in to WHM as root (https://your-server:2087).
2. Open Plugins › ConfigServer Security & Firewall.
3. Use Quick Unblock to remove an existing block for the IP address.
4. Use Quick Allow to always allow a trusted address (for example your office).

From the command line

csf -g 203.0.113.7     # show why the address is blocked
csf -dr 203.0.113.7    # remove a permanent block
csf -tr 203.0.113.7    # remove a temporary block
csf -a 203.0.113.7 "office"   # allow permanently

Note: If a customer is blocked again and again, the cause is usually a mail program or FTP client with an old saved password. Fix that rather than allowing the address permanently.