We've added some new controls to help you fine-tune how Buttondown's firewall handles IP address auditing for new subscribers.
You might have noticed that sometimes legitimate subscribers get caught in the firewall's net — especially if they're signing up from shared IP addresses like corporate networks, VPNs, or coffee shops. We've heard your feedback about these false positives, and today we're giving you more control over the process.
Head over to your Firewall settings and you'll find two new options:
IP address auditing toggle: You can now completely disable IP address auditing if you find it's causing more trouble than it's worth. This is particularly useful if you have a trusted audience or if you're running promotions where you expect a surge of legitimate signups from similar locations.
IP address exemptions: Got a corporate partner whose employees keep getting flagged? Running an event where everyone's on the same WiFi? You can now add specific IP addresses to an exemption list. These addresses will bypass IP auditing entirely, ensuring smooth signups for your trusted sources.
How to use it
The exemptions field accepts a simple list of IP addresses, one per line. For example:
These changes work alongside your existing firewall settings, so you can keep the protection you need while reducing friction for legitimate subscribers. And as always, if you're seeing patterns of false positives that these controls don't address, let us know — we're constantly refining the firewall to be smarter and more accurate. (And hoping we don't accidentally invent a rules engine in the process.)