> For the complete documentation index, see [llms.txt](https://zts-guard.gitbook.io/zts-guard-discord-bot/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://zts-guard.gitbook.io/zts-guard-discord-bot/setup-server-security-settings.md).

# Setup Server Security Settings

The ZTS Guard Discord Bot provides two critical security features for your Discord server.  DM Pausing so that users can not directly receieve DMs from any user in the same server and Anti-Webhook protection. Meaning no one can create a webhook without having a successful 2FA authentication and then allow listing the webhook within 5 minutes.

## Anti-Webhook

Forces any webhook registration to require an active 2FA session that last 5 minutes specifically for allow listing a webhook. Unapproved webhooks are automatically deleted and logged.

### Enable anti-webhook

Within `#zts-guard-admin` type `/setup` → `Server security` → Complete a successful 2FA authentication → `Enable anti-webhook`.

{% hint style="warning" %}
If you have existing webhooks before enabling this feature, you will be prompted to approve each one via a successful 2FA in `#zta-guard-logs`. Know the purpose of each webhook before approving.\
\
If you do not approve the pre-existing webhooks after enabling the feature within 5 minutes, they will be deleted, and if they are needed you will have to set them back up.
{% endhint %}

### Adding new webhooks

1. Within `#zts-guard-admin`  go to `/setup` → `Server security` → Complete a successful 2FA authentication → `Pre-approve a webhook`.
2. You then have **5 minutes** to register the webhook.
3. Each session allows **only one webhook** registration, repeat for each additional webhook you'd like to register.

### Listing/Deleting webhooks

Within the Server Security menu you can select `List webhooks` and this will show you all the webhooks that are allow listed and by whom created them.  If you want to remove a webhook then within the Discord settings go to `Server Settings` → `Integrations` → `Webhooks` or select the webhook icon next to the bot if the webhook is associated to a bot, and delete the webhook.

## DM Pausing

ZTS Guard Discord Bot automatically re-enables Discord's "Pausing DMs" every 24 hours (Discord's maximum limit). When active, non-friend server members cannot directly DM each other, messagess go to a "message request" folder instead. This protects your community from scam DMs.

### Enable DM pausing

Within `#zts-guard-admin t`ype `/setup`→ `Server security` → Complete a successful 2FA authentication → `Enable DMs security`.

The button turns from `red` → `green` when active and you will see a banner near the top of the Discord Server.

<figure><img src="/files/0nyZ0VDO5FZl25Zunwwp" alt=""><figcaption></figcaption></figure>

{% hint style="danger" %}
Do **not** click **Edit Security Action** on the Discord banner that appears — this disables the feature for the entire server due to Discord limitations. Anyone who has **Admin**, **Manage Server**, **Kick** Members, **Timeout** Members, or **Ban** Members **Permissions** has the ability to disable the feature server wide.

To dismiss the banner without disabling the feature, click the **X** in the top right corner only.
{% endhint %}