Site protection: DNS settings

How to set up DNS records?

To protect your site, redirect all incoming traffic to a secure IP address provided in the instructions after purchasing the service — this will filter out malicious requests before they reach the server.

Replace the server's IP address with a protected one in the DNS records. This operation must be performed at the domain registrar or the provider whose DNS servers manage the records for the domain.

For example, if you use ns1.pq.hosting and ns2.pq.hosting, your origin IP is 185.242.87.140, protected IP is 185.129.100.70, you need to replace the record with it.

Before setup

After setup

Please note that the screenshot also shows an entries for ftp and mail, that expose the real IP address of the site and not the protected one.

To prevent an attack on your site via a origin address, you need to:

1. Move mail to a third-party server that will only handle mail. 
   This can be your own mail server OR a public mail service that provides mail on your domain.
2. If your project does not require mail, then it is best to delete mail records.
3. For FTP access, you can use a real IP, and it is better to delete a public DNS record.
4. Also note that if your domain has AAAA records (IPv6 addresses), such records must be removed, since filtration server does not use IPv6.

‼️ Updating DNS records may take from 2 to 24 hours.

Highly recommended to configure a firewall on the server that limits access to 80/tcp and 443/tcp ports only for scrubbing servers. Read more about firewall setup in "Site protection: firewall settings"

Configure your site protection service, read mode in instruction "Site protection: service settings".