DDoS Rules
===================================================

You can find the DDoS Rules at **Firewall → Rules** under the tab **DDoS**.

.. image:: img/DDoS-Overview.png
    :width: 100%
    :align: center
    :alt: DDoS Rules Overview

DDoS Rules are early rules that match an IP Address in the destination or source or a packet.
The packet is processed very early when it reaches the firewall and therefore has a high drop performance.
In case of an active DDoS attack firewall resources are preserved and normal traffic can still be processed.

General Settings
******************

DDoS rules have some of the same options as firewall rules.
You can change the following options here:

**Enabled**
Enable or Disable the rule

**Input Interface**
You can change the Input Interface of this rule.

**Action**
Can be *Drop* or *Accept*. It is *Drop* by default.
**Accept** will act as a whitelist and all **Accept** rules are processed before **Drop** rules.

**IP Address**
Enter one or more IP Address or IP Network to block.

**Log this Rule** will log information when the rule is used.

.. image:: img/DDoS-Rule.png
    :width: 100%
    :align: center
    :alt: DDoS Rule