If attackers can find your server, nothing else matters
A proxy only protects traffic that goes through it. Origin lockdown makes sure that's all of it: proxy every record, hide the IP from DNS and email headers, and lock the origin's firewall to the edge.
What you get
Exposure check
The panel scans your zone for records that leak the origin IP — mail, ftp, cpanel, old subdomains — and proxies them in one click.
Origin authentication
The edge signs every request with a rotating key; your origin can reject anything that didn't come through Greenproxy.
Lockdown guide
Step-by-step firewall instructions for cPanel/CSF, ufw, iptables and cloud security groups, with the exact edge addresses to allow.
Strict origin TLS
A platform-issued origin certificate and edge client certificate so the origin only speaks to the edge.
How it works
In the panel
Open the Origin protection card on any domain: it lists what's exposed, what to change, and verifies the lockdown from the edge once you're done.
Questions
- Can my origin still send email?
- Yes, but mail sent directly from the origin carries its IP in headers. The guide covers routing mail through a relay.
More from Greenproxy
45+ signals including TLS/JA3 fingerprinting and behavioural analysis to tell real visitors from scrapers and scanners.
Expression-based rules with a visual builder — allow, block, challenge, or log any request pattern.
Full authoritative DNS with an audit log, wildcard support, and one-click record imports from your old provider.