All help guides

Ad Block and rules

Rules decide what goes through your server, what connects directly, and what Warrenet™ blocks.

Open the rules

Rules are locked while the VPN is on, so disconnect first. Your changes apply the next time you connect.

  1. Open VPN and choose Disconnect if you’re connected.
  2. Below Servers, choose a mode: Proxy or Direct. Each mode has its own rules.
  3. Choose Rules.
The Rules sheet on a Mac with Ad Block on and one custom rule.

Choose a mode

ModeWhat it does
ProxyAll traffic goes through your server, except what your rules and the private network rule send elsewhere. Most people want this mode.
DirectTraffic connects directly, without your server, except what your rules send through it.

You can add SOCKS5 and HTTP modes with the ⋯ button beside the modes. These run a proxy on your device that you point a single app at, instead of using the system VPN.

Ad Block

Turn on Ad Block to stop connections to known ad domains. The list ships with the app and updates when the app does. It won’t catch every ad.

If a website or app stops working with Ad Block on, add a custom rule for its domain. Custom rules are checked first.

Send a country’s websites directly

Some local services are slow or refuse connections from abroad. In any mode except Direct, turn on China Direct, Russia Direct, or Iran Direct to connect to websites and addresses in that country directly, without your server.

Traffic that connects directly doesn’t go through your VPN server, so those sites see your device’s own address.

Add a custom rule

  1. Under Custom rules, choose a Type and an Action.
  2. Enter the value, such as example.com.
  3. Choose + to save the rule.
The Rules sheet on an iPhone with the custom rule entry row.
TypeMatchesExample
Exact DomainOne domain name onlywww.example.com
Domain SuffixA domain and everything under itexample.com
Domain WildcardNames that match a pattern*.example.com
IP / CIDRAn address or address range10.0.0.0/8
GeoIPAddresses in a country you pick from a listGermany
GeoSiteA category of websites you pick from a listA company or service name
ActionWhat it does
ProxySend the traffic through your server. Under Server, choose Auto or one of your selected servers.
DirectConnect without your server.
RejectBlock the connection.

New rules are added at the top of the list. Use the arrows to move a rule, and the minus button to delete it.

The order rules run in

The first rule that matches decides what happens. The Evaluation order section at the bottom of the sheet shows the order:

  1. your custom rules, from top to bottom
  2. Ad Block
  3. private networks, which connect directly
  4. the country rules you turned on
  5. everything else, which follows the mode

In Direct mode there are no private network or country rules, and everything else connects directly.

To turn every rule off for a mode without losing them, turn off Enable rules.

Rules on your other devices

With iCloud sync on, your custom rules appear on your other devices. A rule new to a device uses Auto there. Ad Block and the country rules stay separate on each device.

Need more help? Contact support.