SPCast Safeguard Firewall Protection

SPCast Safeguard is a genuine software firewall for streaming services. It is not a simple blocklist filter like classic Icecast or Shoutcast setups, but a complete access control system with IP firewall, country blocking, whitelists, and connection rules at the network level.

Geoblocking with platform protection

Entire countries can be allowed or blocked in the dashboard. This enables compliance with regulations in certain regions without losing access to legitimate streaming platforms.

Example:
The US can be blocked, while platforms such as spradio.eu
, radio.de,
or tunein.com
continue to function, even if their infrastructure is partially hosted in the US.

Firewall functions at a glance

• IPv4 and IPv6 block lists
• CIDR support for network range blocking
• Rate limiting at the firewall level
• Block or allow countries
• Global exceptions for streaming platforms
• AllowOnly mode (whitelist-only access)
• Active without restart, effective immediately

Direct IP blocking (time-based)

IP addresses are immediately disconnected and blocked via the firewall. A time-based block can be set in seconds.

• Direct blocking of active connections
• Input in seconds (e.g., 300 = 5-minute block)
• Automatic unblocking after expiration, unless permanently stored
• Manual early unblocking possible

Block mask details: Read more about IP blocking

Allow IP addresses (whitelist)

Individual IPv4 and IPv6 addresses or network ranges can be deliberately allowed.
Details: Read more about IP whitelisting

AllowOnly mode

Safeguard can be set to whitelist only mode:

• Only explicitly allowed IP addresses are granted access
• All other connections are rejected
• Ideal for internal company streams or closed networks
• Maximum control with minimal attack surface

SPCast Safeguard principle

Dedicated firewall control for streams in real time. No simple lists. No delays. No restarts. Full control over connections, countries, platforms, IP ranges, and access scenarios.