VPS firewall rules

The panel’s firewall and the firewall inside your operating system are separate. A connection must pass both, as well as the listening service’s own configuration.

Before enabling a restrictive policy

1. Open and test the browser console as a recovery path.
2. Note your SSH port and the source addresses that need access.
3. Add the required allow rules before changing the default inbound policy to drop.
4. Include IPv6 rules if the server uses IPv6.
5. Keep your current SSH session open and test a second session.

Check each rule’s direction, protocol, port and source. Restrict administration ports to trusted addresses where practical. Opening port 443 does not start an HTTPS server; the guest must have a service listening there.

If a connection fails

Check the rule order and default policy, then the guest firewall and service logs. Use the console to recover from a rule that blocks SSH. Avoid disabling every protection permanently just to troubleshoot one port.

Changes to the network firewall do not update operating-system packages or secure application accounts. Those remain part of managing your VPS.