VM firewall · Virtual machines

Control which traffic can reach your VM, with quick setups or your own rules.

How rules work

Open the VM and choose the Firewall tab. Rules are checked from top to bottom, and the first rule that matches decides. Anything no rule matches falls to the Everything else policy. Drag a rule by its handle to change the order.

With the firewall off, all incoming traffic is allowed.

Quick setup

Quick setup replaces your incoming rules with a ready-made set, for example allowing SSH, HTTP and HTTPS and dropping everything else. It shows the resulting rules before you apply them. Outgoing rules are not changed.

Add your own rules

Each rule has an action (Allow, Drop or Reject), a direction, a protocol, a port or port range, and optional source or destination addresses in CIDR form. Common services are built in:

SSH: TCP 22

HTTP: TCP 80

HTTPS: TCP 443

MySQL: TCP 3306

PostgreSQL: TCP 5432

RDP: TCP 3389

Ping: ICMP

Before you set Everything else to Drop, make sure a rule allows SSH or RDP from your address, or you will lock yourself out. The browser console still works if that happens.