# How to Manage Your VPS Firewall Rules

> Canonical: https://jethost.com/kb/how-to-manage-your-vps-firewall/ · Last modified: 2026-08-20T06:47:39+00:00

JetHost includes a cloud firewall for every VPS, managed from the Client Area. It controls which traffic can reach your server, so you can lock things down without touching the command line.

## Step-by-step: Add a firewall rule

1. Open your VPS in the Client Area and go to the **Firewall** tab.
2. Under **Add Rule**, choose the **protocol** (TCP, UDP, and so on).
3. Enter the **Source CIDR** (for example, `0.0.0.0/0` for anywhere, or a single IP).
4. Set the **Start** and **End port** for the range.
5. Optionally add a **Name**, then click **Add Rule**.

![VPS Firewall tab showing rules and the Add Rule form](https://jethost.com/wp-content/uploads/2026/07/vps-firewall-tab.png)## Reviewing and deleting rules

Existing rules are listed with their name, protocol, source CIDR and port range. To remove one, click **Delete** next to it. By default a VPS may allow all traffic (0.0.0.0/0 and ::/0) - tighten this to only the ports your services actually need.

## Common ports to allow

- **22** - SSH (restrict the source CIDR to your own IP where possible)
- **80** and **443** - HTTP and HTTPS for websites
- Only the specific ports your applications require - keep everything else closed

## JetHost Experts Tip

Before you tighten SSH access, make sure you can reach the **browser Console**. If a firewall rule ever locks you out, the noVNC console still works and lets you fix the rule.

## Need More Help?

The cloud firewall lets you control exactly what can reach your VPS - safely and without the CLI. If you get stuck, the JetHost team is available 24/7 and usually answers in under five minutes - just [contact us](https://jethost.com/contact-us/) and we'll help you sort it out. Explore our other [VPS tutorials](https://jethost.com/kb/category/vps/) to get the most out of your server.