Articles on: Tips

Applying an application filter

To apply an application filter to your server first direct yourself to the firewall manager shown in Setting up edge firewall rules then click on "Filters"

For filters to work you must first open or ratelimit the port that you are attempting to apply a service filter for.


Image of filters


The filters that we offer via the Tempest Firewall Manager are as follows:

TeamSpeak 3 Server - Layer 7 application filter to allow only TeamSpeak based traffic over the defined port.
OpenVPN UDP server - Layer 7 application filter to allow only OpenVPN-UDP based traffic over the defined port. (you may read more about this via https://blog.path.net/application-filters/)
Source Engine Server - Layer 7 application filter to allow only VSE based traffic over the defined port. (you may read more about this via https://blog.path.net/source-proxy/ this filter also enables the game based anycast feature that Tempest offers free of charge).
RakNet Server - Layer 7 application filter to allow only RakNet based traffic over the defined port. (Used typically for RUST)
TCP Service - Layer 7 application filter that enables stricter packet validation for TCP packets incoming on a listening port.
TCP Service (symmetric) - Layer 7 application filter that full packet validation for incoming TCP connections. Requires that the return traffic is also routed through our network.
Minecraft (Java Edition) - Layer 7 application filter (symmetric) that enables full packet validation for Minecraft Java Edition servers.
Half Life 2/Source Server - Layer 7 application filter that enables packet validation for Half Life 2/Source UDP traffic.
FiveM - Layer 7 application filter (symmetric) that enables packet validation for FiveM traffic.
Half-life Dedicated/GoldSrc - Layer 7 application filter enabling packet validation for HLDS/GoldSrc UDP traffic.
DNS UDP - Layer 7 filter enabling packet validation for DNS queries over UDP.
WireGuard - Layer 7 application filter to enable packet validation for WireGuard VPN servers (To avoid packet loss from fragmentation, it is recommended that you adjust your MTU to 1360).
ARMA 3 - Layer 7 application filter that enables packet validation for ARMA 3 game servers.
DayZ - Layer 7 application filter that enables packet validation for DayZ game traffic.
Squad - Layer 7 application filter that enables packet validation for Squad game traffic.
STUN Server - Layer 7 application filter enabling packet validation for STUN server.
RakSAMP - Layer 7 application filter to enable packet validation for SA-MP (San Andreas Multiplayer) game traffic.
SA-MP Server Queries - Layer 7 filter that enables proxying for SA-MP (San Andreas Multiplayer) server queries.
Left 4 Dead 2/CS:GO Source - Layer 7 application filter that enables proxying for source games using L4D2's source engine version. This currently includes Left 4 Dead, Left 4 Dead 2, Counter-Strike: Global Offensive, and Portal 2. This filter can also be paired with our Source Engine filter.
QUIC - Layer 7 application filter enabling packet validation for QUIC.
SIP - Layer 7 application filter enabling packet validation for SIP.
DTLS - Layer 7 application filter enabling packet validation for DTLS.
RTP - Layer 7 application filter enabling packet validation for RTP.
Renegade X - Layer 7 application filter enabling packet validation for Renegade X game traffic.

Updated on: 01/12/2021

Was this article helpful?

Share your feedback

Cancel

Thank you!