mcmodwiki
Mods › Firewall

Firewall

Filters sent/received packets

10 config settings

Build 1.5.0 · checked 13 September 2026

Guides

Config

  • Custom payload identifiers customPayloadIdentifiers firewall-config — Clients communicating with servers sometimes use custom payload packets, aka plugin channels. Here are some identifiers of packets that may be worth suppressing: minecraft:brand: The brand packet, used by Vanilla and modded Minecraft clients. minecraft:register: Tells the receiver the custom channel…
  • Identifiers of logged custom payloads loggedCustomPayloadIdentifiers firewall-config — What custom payloads should be logged - regardless of if they're rejected or not.
  • Identifiers of logged packets loggedPacketIdentifiers firewall-config — What packets should be logged - regardless of if they're rejected or not.
Show all 10 settings
  • Packet identifiers packetIdentifiers firewall-config — Allowed packet resource identifiers - see https://minecraft.wiki/w/Java_Edition_protocol/Packets
  • Registered channel identifiers registerIdentifiers firewall-config — Allowed channel identifiers in minecraft:register, minecraft:unregister (used by Bukkit, BungeeCord, Velocity and Fabric API) and c:register packets (used by FabricMC, NeoForged, PaperMC and SpongePowered team).
  • Brand overwrite value brandOverwriteValue firewall-config — 'vanilla', 'fabric' or anything else. Used only if the brand overwrite is enabled.
  • Respond to rejected received query requests respondToRejectedQueryRequests firewall-config — Received query requests, aka login plugin requests or minecraft:custom_query, should probably be responded to, as to not break the configuration phase. If this is enabled, the rejected requests will be responded with a default, vanilla empty response. Don't recommend disabling this.
  • Enabled isEnabled firewall-config — Logging toggle. Can be toggled via Key Binds.
  • Receive empty channel lists recvEmptyChannelLists firewall-config — Should the mod receive or reject empty channel lists. Fabric API internally sends the channel list iff it isn't empty.
  • Send empty channel lists sendEmptyChannelLists firewall-config — Should the mod send or reject empty channel lists. Fabric API internally sends the channel list iff it isn't empty.

Requires

ModNeededVersions
fabric-api required *
fabric-key-binding-api-v1 required *
owo-lib required *

Needs Java >=21.

Frequently Asked Questions

How do you quickly turn packet filtering on or off?

You can assign the Toggle mod key in the Controls menu to switch the firewall between enabled and disabled states at any time.

Can Firewall disguise what client software you are playing on?

Yes, enabling Should overwrite the brand allows you to specify a custom label like vanilla using the Brand overwrite value setting.

How do you avoid getting disconnected when rejecting server plugin queries?

Keep Respond to rejected received query requests enabled so the mod returns an empty standard reply instead of letting the query hang.

How can you view network packets without cluttering the console forever?

Use the Toggle logging action key to activate console tracking only while debugging specific network channels.

What controls which custom payload channels are allowed through?

You can define permitted plugin channels inside Custom payload identifiers and Registered channel identifiers within the config screen.

Download Links

Mods › Firewall