Connection filters

The on-connect pipeline: what each filter blocks, which side runs it, and the options behind every card.

Connection filters decide who is allowed to finish connecting, before the player is in the world. They are the last gate in front of your server and they run on every connection attempt. The section is in Main Settings on resource 1.7.3 and newer. Older servers have no such config keys, so the section is not shown for them at all.

Cloud or resource

This is the part worth understanding before touching anything.

  • The Raven cloud runs the ban check and the VPN, name, country and Discord filters. They happen during the connection handshake, before a play session opens. A player who trips one never gets in, and the connection is cancelled with the same style of screen a ban shows.
  • The resource enforces client tokens in game, with an automatic kick, because that check needs the player client to have loaded.

Because the cloud owns the first group, changing those filters takes effect on the next connection with no restart. The wording of the rejection screen is edited in Display Settings under Connection filter rejection, covered on Main Settings.

Global Bans

The first card, on servers where this section exists. Full detail on Global bans.

VPN / Proxy Check

Rejects connections coming through a known VPN, proxy, or hosting provider address. One toggle, no options.

Name Filter

Rejects malformed or abusive player names. Four options behind the toggle:

  • XSS and injection detection, on by default. Blocks HTML and script payloads in a name. Leave this on. A name is rendered in a lot of places, and this is what stops one being used as a delivery mechanism.
  • Block non-ASCII names, off by default. Rejects emoji and any non-Latin script. This is a blunt instrument: turning it on rejects every player whose real name is written in Cyrillic, Arabic, Hebrew, Chinese or Japanese.
  • Min length and Max length. Defaults are 0 and 32.
  • Blocked words. Substrings, not whole words, so a short entry matches inside longer names. Adding something like admin also rejects a player called Badminton.

Country Filter

Allows or blocks connections by country, resolved from the player address. The card is always open, even when the filter is off, so the map is there to look at before you commit to anything.

  • Block selected rejects the countries you pick and lets everyone else in.
  • Allow only selected rejects everyone except the countries you pick. Read that again before saving. One forgotten country locks out a whole region of your player base.

Pick countries by clicking the map or searching the list. The map supports zoom and region filters, and each selection also appears as a removable chip under it. Picking a country turns the filter on automatically so the change actually takes effect, and clearing the list back to empty turns it off again, because a country filter with no countries filters nothing. For the same reason the toggle will not switch on while no country is selected.

Discord Filter

  • Force Discord. Rejects any player with no linked Discord account. Every player without Discord linked in FiveM is turned away, so this is a real policy decision and not a spam setting.
  • Minimum account age, with a value in days, defaulting to 14 and never below 1. Rejects accounts newer than that. The age is read out of the Discord account id itself, so there is no lookup and no rate limit involved.

Client tokens

There is no longer a control for this. Resource 1.8.1 and above stop reading the setting, and below that it is always sent as off, so a toggle would imply a choice that no longer exists. The message shown when a player is dropped for missing tokens is still editable under Display Settings.

The key itself has not gone anywhere. ConnectionFilters.ForceClientTokens.Enable is still in the config template, still ships as true, and is still visible in the JSON editor. Editing it there changes nothing, because the value the resource receives is decided on the way out rather than read back from what you saved. If you have seen the feature named somewhere and gone looking for the switch, that is why you could not find it.

Editing behaviour to know about

  • Changing any option inside a filter turns that filter on if it was off. Editing the Discord age while the Discord filter is disabled enables it, so check the toggle after you tune something.
  • Nothing saves as you type. The section rides the same Save Changes bar as the rest of Main Settings.
  • Country codes are stored as uppercase two-letter codes whatever you typed or clicked.
  • Changing any of this needs the settings edit permission.