Firewall

The Firewall controls which network traffic reaches a server — open ports, allowed and blocked sources. Find it under Servers → Firewall.

What you see

• Open ports & services — what's reachable.
• Allowed sources — IPs/ranges explicitly permitted.
• Blocked sources — IPs/ranges denied.
• Other rich rules — more specific custom rules.

Adding a rule

1. Click New rule.
2. Name — a label for the rule.
3. Action — allow or deny.
4. Direction — inbound or outbound.
5. Protocol — TCP or UDP.
6. Source CIDR — the IP/range it applies to (blank = any), e.g. 203.0.113.0/24.
7. Destination port — the port, e.g. 443.
8. Priority — lower numbers evaluated first (default 100).
9. Save. Toggle a rule on/off from its row, or delete it.

Take care not to lock yourself out — don't block the ports you manage the server on. Automatic intrusion blocking is handled separately by Fail2ban.