How to Manage Your VPS Firewall Rules

JetHost includes a cloud firewall for every VPS, managed from the Client Area. It controls which traffic can reach your server, so you can lock things down without touching the command line.

Step-by-step: Add a firewall rule

1. Open your VPS in the Client Area and go to the Firewall tab.
2. Under Add Rule, choose the protocol (TCP, UDP, and so on).
3. Enter the Source CIDR (for example, 0.0.0.0/0 for anywhere, or a single IP).
4. Set the Start and End port for the range.
5. Optionally add a Name, then click Add Rule.

VPS Firewall tab showing rules and the Add Rule form

Reviewing and deleting rules

Existing rules are listed with their name, protocol, source CIDR and port range. To remove one, click Delete next to it. By default a VPS may allow all traffic (0.0.0.0/0 and ::/0) – tighten this to only the ports your services actually need.

Common ports to allow

22 – SSH (restrict the source CIDR to your own IP where possible)
80 and 443 – HTTP and HTTPS for websites
Only the specific ports your applications require – keep everything else closed

JetHost Experts Tip

Before you tighten SSH access, make sure you can reach the browser Console. If a firewall rule ever locks you out, the noVNC console still works and lets you fix the rule.

Need More Help?

The cloud firewall lets you control exactly what can reach your VPS – safely and without the CLI. If you get stuck, the JetHost team is available 24/7 and usually answers in under five minutes – just contact us and we’ll help you sort it out. Explore our other VPS tutorials to get the most out of your server.