GoAdmio
GoAdmio Documentation

Country Whitelist

From the GoAdmio knowledge base.

Country Whitelist

This page explains the Country Whitelist feature in GoAdmio. It exempts visitors from one or more countries from automatic IP blocking — so traffic from those countries is never blocked by the AI-driven abuse protection that blocks IPs for high traffic or bad behavior.

Location: Admin Panel → Security → Country Whitelist
Location (User Panel): Security → Country Whitelist (if enabled for the account)


Overview

GoAdmio's security stack includes automatic IP blocking driven by heuristics and AI: IPs that generate excessive traffic, fail repeatedly, or exhibit attack patterns are blocked automatically. This protects the server — but it can also block legitimate high-traffic sources, such as:

  • A customer's own ISP or office network
  • A regional CDN or proxy that serves many legitimate users
  • A monitoring service or API provider in a specific country
  • A business partner or integration that sends regular requests
The Country Whitelist lets you exempt entire countries from automatic blocking. When an IP from a whitelisted country triggers the auto-block heuristics, the block is skipped — the traffic continues to flow.

> Warning: Whitelisting a country disables automatic protection for every IP in that country. An attacker operating from a whitelisted country can consume server resources without being auto-blocked. Use this feature sparingly, and only for countries you have a specific, verifiable reason to trust.


What the Page Shows

| Column / Field | Description |
|---|---|
| Country | The country name and ISO code (e.g., Egypt (EG)) |
| Status | Whether the country is whitelisted |
| Added By | Who added the whitelist entry |
| Date Added | When the country was whitelisted |
| Actions | Remove the whitelist entry |
| Search | Filter the list by country name or code |

> Tip: The list typically shows all countries with a toggle, or only the whitelisted countries with an Add button — depending on your GoAdmio version. Check the page header for the active mode.


How to Whitelist a Country

Via the Admin Panel

  1. Log in to the GoAdmio Admin Panel.
  2. Navigate to Security → Country Whitelist.
  3. Search for the country by name or ISO code.
  4. Enable the whitelist for that country (toggle, checkbox, or Add button).
  5. Save.
Traffic from that country is now exempt from automatic IP blocks.

Removing a Country from the Whitelist

  1. Open Security → Country Whitelist.
  2. Locate the country.
  3. Disable the whitelist (toggle off, or Delete).
  4. Save.
Automatic protection resumes for that country's IPs immediately.

How It Works

When an IP triggers an automatic block heuristic:

  1. GoAdmio determines the IP's country using a GeoIP database.
  2. It checks the Country Whitelist for that country.
  3. If the country is whitelisted → the block is skipped; the request proceeds.
  4. If the country is not whitelisted → the block is applied as usual.
> Note: The Country Whitelist only affects automatic blocks. Explicit manual blocks via IP Blocker are not overridden — if you manually block an IP, it stays blocked even if its country is whitelisted. This is intentional: manual blocks are explicit decisions.

> Tip: The Country Whitelist complements IP Blocker — use IP Blocker for targeted manual blocks, and Country Whitelist to prevent false positives from automatic blocking.


Common Use Cases

| Scenario | Whitelist |
|---|---|
| Customers are in a specific country and their office IPs get auto-blocked | That country |
| A regional CDN or proxy serves many legitimate users from one country | That country |
| A monitoring service or API provider operates from a specific country | That country |
| A business partner or integration sends regular requests from one country | That country |
| The hosting provider's own infrastructure is in a specific country | That country |
| A search engine crawler operates from a known country | That country (with caution) |
| A known attack source is in a country | Do not whitelist — keep automatic protection active |

> Warning: Do not whitelist a country solely because "most of our customers are there." If the country has a high volume of attack traffic, whitelisting it disables protection against that traffic too.


GeoIP Accuracy

Country detection relies on a GeoIP database (MaxMind, IP2Location, or similar). Accuracy varies:

| Factor | Impact |
|---|---|
| VPN / proxy | The IP's geo-location may not match the user's real location |
| Mobile networks | IPs may be registered to a different country than the user |
| Cloud providers | IP ranges may be assigned to a country different from the workload's location |
| Stale database | New IP allocations may be misclassified |

> Tip: If the Country Whitelist is not working as expected, verify the IP's detected country with a tool like geoiplookup or an online GeoIP lookup. If the database is stale, update it — or contact GoAdmio support for the current GeoIP source.


Verifying the Whitelist

Test with curl

From an IP in the whitelisted country (or via a VPN):

```bash
curl -I https://example.com/

↑