PD Guard Pro can restrict administrator access by network address or country. Set the intended allowed access before enabling the restriction.

Check the address the module sees

Open PD Modules → Guard → Admin Access Lock. Read Your IP and Your country. Compare the address with the connection you intend to allow. If it is an unexpected proxy address or the country is unknown, resolve that before depending on a country restriction.

Before enabling the lock, check Admin Access Lock for a Not enforced yet message. An older PD Modules installation can save these settings without applying the lock to admin requests. Update PD Modules through its normal update process and review the tab again before relying on the restriction. The address and country rules are alternatives: an administrator is allowed when their IP or country matches. Selecting a whole country therefore permits more connections than selecting one office address. Country information describes a network location; it does not verify the administrator’s identity.

Add allowed addresses and countries

1. In Settings, enter the intended addresses or valid network ranges in Pro: allowed admin IPs / CIDR ranges. The field accepts comma- or space-separated entries, with IPv4 or IPv6 addresses.
2. Include the access needed by your current session and the administrators who maintain the installation. Have your network administrator confirm each range and its scope; a successful save is not proof that every range was entered correctly.
3. On Admin Access Lock, select any intended Allowed admin countries, then choose Save allowed countries. Countries are selected here, separately from the address field in Settings.
4. Review both lists together. An empty country list leaves address rules; an empty address list leaves country rules. Both lists empty means no access restriction, even if the lock switch is on.

Enable and review

In Settings, enable Pro: lock admin access by IP / country, then choose Save settings. Review Admin Access Lock again and check the reported address, country and status.

The save checks whether the current recognised address would still be allowed. This is a safeguard for that session, not a promise that future addresses or every administrator will remain allowed. A changing mobile connection or VPN may use a different address later. The lock also allows a request when it cannot determine the address, and it does not apply without active Pro access. Keep your usual administrator authentication and other protection in place.

If access is refused

PD Guard’s Access denied message identifies the admin access policy. Use an already allowed network, or ask another administrator with allowed access to review the policy. Do not remove unrelated firewall or proxy protection, enter broad ranges merely to regain access, or attempt internal repairs.

See the PD Guard Blesta guide for related tasks, or explore PD Guard.