# Dynamic Firewall - Configure Bypass of IPs

**URL:** <https://forum.pritunl.com/t/dynamic-firewall-configure-bypass-of-ips/3812>\
**Category:** Pritunl VPN\
**Created:** [June 30, 2026, 7:51pm UTC](https://forum.pritunl.com/t/dynamic-firewall-configure-bypass-of-ips/3812 "2026-06-30T19:51:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![lucasruchel](https://forum.pritunl.com/user_avatar/forum.pritunl.com/lucasruchel/32/1509_2.png) [@lucasruchel](https://forum.pritunl.com/u/lucasruchel)\
**Post date:** [June 30, 2026, 7:51pm UTC](https://forum.pritunl.com/t/dynamic-firewall-configure-bypass-of-ips/3812/1 "2026-06-30T19:51:11Z")

</div>

Hi everyone,

I am having trouble with my Pritunl setup. Some of our clients are behind an environment that uses outbound load balancer links. I haven’t been able to find an option in the interface or the documentation to bypass specific IPs.

We use SSO login, and I am considering creating a plugin using the `sso_authenticate` hook to implement logic based on source IPs, adding the load balancer IPs there.

However, I wanted to check if there is an alternative or cleaner way to configure IP bypasses within the Dynamic Firewall?

Any help or guidance would be greatly appreciated.

Best regards,  
Lucas

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [June 30, 2026, 8:41pm UTC](https://forum.pritunl.com/t/dynamic-firewall-configure-bypass-of-ips/3812/2 "2026-06-30T20:41:41Z")

</div>

You can add the IP addresses to the `<server_id>_df` and `<server_id>_df6` ipset. This controls what IPv4 and IPv6 addresses can access the server. It should remain in the ipset until the server is restarted.