Rules: block an address, a machine, a country, a network or VPNs
Decide who may not sign in to your app at all, before the key or the account is even looked at. Rules is a new page in the panel, under *Your app*, one set per application.
- Block an address or a range: one IP, or a block like
203.0.113.0/24(IPv6 too). - Block a machine: a PC that must not sign in again, whatever key it tries. Easiest from Sessions: press *Block this machine* (or *Block this IP*) on its row and the form is filled in.
- Block a country: by its two-letter code, when you do not sell there or most abuse comes from there.
- Block a network: a provider or data centre by its AS number, every address it owns.
- Block VPNs and proxies, and hosting addresses (servers and bot farms, not homes): two switches.
- Allowed addresses only: for a program used from known places, an office or your own servers. With one address in the list, every other address is refused.
What the customer's program gets is BLOCKED with your own words, set in Applications → Messages → Blocked. The key is not touched: not used up, not bound, not counted. Each rule shows how often it fired, and every refusal is in your Dashboard's activity as *Sign-in refused · Blocked by rule*. Add a rule with *Sign out the running copies* ticked and every copy it refuses is signed out within 30 seconds.
A rule is a blunt tool: it refuses everyone it matches, paying customers too. Prefer banning the one key when the problem is one customer; use a rule when the problem is a place or a machine. Docs: Rules.