Settings
, then Sites
, click on your site, then click the Firewall
tab.
Note: if you’ve blocked pages, or IPs, or domains, or countries, people visiting them or visiting from blocked things will still be able to see your site and click around. Their visits just won’t be collected as data on your Fathom dashboard.
Blocked pages
To block a page, multiple pages or use wildcards to block pages, add the pathname to theBlocked pages
section on the Firewall tab. For example:
/about
page, so pages like /about/team
and /about/luna
and so on, you’d add a wildcard:
Blocked IPs
To block your IP, someone else’s IP, or a group of IPs, add the IP to theBlocked IPs
section in the Firewall tab. Note that IP blocking takes about 60 seconds to take effect.
For example:
100.100.100.
would be blocked. So 100.100.100.1
, 100.100.100..123
, etc, would all be blocked.
Note: Currently only IPv4 addresses are supported for wildcards
Blocked countries
Like IP blocking, you can block specific visits from anyone within a country. Why would you do this? Say you’re getting a ton of traffic from a country that your business doesn’t serve; simply add that country to your block list. They’ll still be able to see your website, but their page views and analytics data won’t show up in Fathom.Allowed domains
If you want to only allow data to be collected from specific domains, add them to theAllowed domains
section of your firewall settings page. Domains should be entered one per line (no commas).
Once you add one or more allowed domains, this means data coming from any other domain will be blocked instantly. This is useful if you do not want to collect data from your local development environment or are worried that other people may be using your script (by accident or otherwise).
We support wildcards here too, so if you want to allow all subdomains, you can use:
subdomain.example.com
and www.example.com
, etc. But note: using *.example.com
would not allow example.com
, so be careful.
If you want to only allow data from your site and use both the root domain and subdomains, you’d allow: