How to allowlist FTP, WAF and database

In the text below we will explain how you can add an IP to the whitelist by using the control panel or CLI (command-line interface). Whitelisting an IP can be for multiple reasons like, connecting via FTP, connecting to a database or for security scans like ForusP.

Adding IP Addresses in the allowlist via the control panel for FTP, WAF and database

Follow these steps to whitelist an IP addresses for FTP:

  • Go to the control panel

  • Log in with your credentials

  • Once logged in, select the Hypernode you wish to configure

  • Click on Allowlist from the menu

  • Select Rule type and choose here for example FTP from the dropdown

  • Enter the IP address you want to add to the whitelist

  • Provide a descriptive name for the entry for example Office webshop. Use descriptive names when adding entries to help identify their purpose in the future.

  • Click on Save to apply the changes

Using the hypernode-systemctl whitelist command (CLI)

The hypernode-systemctl whitelist command allows you to manage allowlist entries for different services on your Hypernode. You can use it to add, remove, or list allowlist entries for FTP, WAF, database, and SSH.

Command structure

hypernode-systemctl whitelist [-h] {add,remove,get} ...
  • add: Add an IP address to the allowlist for a specific service.

  • remove: Remove an IP address from the allowlist for a specific service.

  • get: List current allowlist entries. You can filter by service type.

Supported types

You can specify the type of service for which you want to manage the allowlist:

  • ftp

  • waf

  • database

  • ssh

Adding an IP with a description

You can add a description to help identify the purpose of the allowlist entry:

hypernode-systemctl whitelist add [--description DESCRIPTION] {waf,database,ftp,ssh} ip

Example:

hypernode-systemctl whitelist add --description "Office SSH access" ftp 1.2.3.4

Removing an IP from the allowlist

To remove an IP address from the allowlist for a specific service, use the following command:

hypernode-systemctl whitelist remove {waf,database,ftp,ssh} ip

Example:

hypernode-systemctl whitelist remove ftp 1.2.3.4

Listing allowlist entries

To view all allowlist entries, use:

hypernode-systemctl whitelist get

To filter by type (e.g., only FTP):

hypernode-systemctl whitelist get --type ftp

This will show all currently allowlisted IPs for the specified service.