Manage basic firewall rules

For a basic firewall, you can add new rules, modify existing rules and their order, and delete rules.

Add rule⁠

carefully

After adding the first rule for a destination, the base rule is automatically connected: all traffic that is not allowed is prohibited. You cannot delete the base rule.

You can configure up to 15 rules per traffic direction for one basic firewall. You can add up to 30 IP addresses or subnets to each rule for traffic source and traffic destination.

1. In the Control Panel top menu, click Products → Dedicated Servers → Basic Firewall section.

2. Open the firewall page.

3. Open the tab depending on which traffic you want to add a rule for:

   • for incoming traffic — Incoming traffic;
   • for outgoing traffic — Outgoing traffic.

4. If you have already added or edited rules, check the status of the firewall. Make sure that the firewall displays the APPLIED status . On the firewall's menu, click Edit Rule List. Click Add Rule.

5. If you have not added or edited rules, click Add Rule.

6. Check the direction of the traffic.

7. Select an action:

   • accept — accept traffic;
   • deny — deny traffic.

8. Enter Source address — IP addresses from which to accept requests.

9. Enter Destination address — IP addresses to which requests can be accepted.

10. Enter Source port — the source port from which the request is coming. You can enter a port or a range of ports, ports 1 through 65535 are available.

11. Enter Destination port — the port on which the request will be received. You can enter a port or a range of ports, ports 1 through 65535 are available. Traffic to any TCP/UDP port blocked in Servercore by default will be denied, even if you specify this port in the rule.

12. Select the protocol: TCP, UDP, ICMP, IPIP, GRE, ESP, NA.

13. Optional: enter a description of the rule.

14. Click Create Rule.

15. Check the order of the rules, they are executed in order in the list — from top to bottom. If necessary, change the order of the rules — drag and drop the rules.

16. Click Activate List. When the rules are activated, the firewall displays the APPLIED status . It may take up to 30 seconds to apply the changes. If you do not activate the list, the rules are reset.

Change the rule⁠

1. In the Control Panel top menu, click Products → Dedicated Servers → Basic Firewall section.

2. Open the firewall page.

3. Open the tab depending on which traffic you want to change the rule for:

   • for incoming traffic — Incoming traffic;
   • for outgoing traffic — Outgoing traffic.

4. On the menu of the rule list, click Edit Rule List.

5. On the menu of the rule, click Edit Rule.

6. Change the values of the parameters in the rule.

7. Click Save Changes.

8. Click Activate List. When the rules are activated, the firewall displays the APPLIED status . It may take up to 30 seconds to apply the changes. If you do not activate the list, the changes are discarded.

Change the order of the rules⁠

1. In the Control Panel top menu, click Products → Dedicated Servers → Basic Firewall section.

2. Open the firewall page.

3. Open the tab depending on which traffic you want to change the order of the rules for:

   • for incoming traffic — Incoming traffic;
   • for outgoing traffic — Outgoing traffic.

4. On the rules menu, click Edit Rule List.

5. Drag and drop rules. You cannot drag and drop a base rule.

6. Click Activate List. When the rules are activated, the firewall displays the APPLIED status . It may take up to 30 seconds to apply the changes. If you do not activate the list, the changes are discarded.

Delete rule⁠

carefully

The rule will no longer be in effect — traffic that was allowed by this rule will be denied.

1. In the Control Panel top menu, click Products → Dedicated Servers → Basic Firewall section.

2. Open the firewall page.

3. Open the tab depending on which traffic you want to remove the rule for:

   • for incoming traffic — Incoming traffic;
   • for outgoing traffic — Outgoing traffic.

4. On the menu of the rule list, click Edit Rule List.

5. From the menu of the rule, click Delete Rule.

6. Click Activate List. When the rules are activated, the firewall displays the APPLIED status . It may take up to 30 seconds to apply the changes. If you do not activate the list, the changes are discarded.