With firewall wizard you can apply iptables rules from panel itself.
Test Mode: By default testing mode will be on, But the testing interval will be started after staring/restarting firewall from panel, If testing interval is started then after stipulated time we will flush the rules and apply default rules that virtualizor needs.
Firewall Enable: This will start the Virtfirewall service, after starting the firewall we will reapply all the rules that are there in config.
Firewall Restart: This will restart the Virtfirewall service. after restating the firewall we will reapply all the rules that are there in config.
Firewall Disable: This will stop the Virtfirewall service, By stopping the firewall we will flush the rules and set INPUT chain to ACCEPT.
Set Testing Interval: This will set testing interval after which we will reset the rules.
Factory Reset: This is reapply default rules that are needed by virtualizor.
Firewall Version: This will show you the iptables version
View Iptables Rules: This will get the rules that are applied on server.
Block Port: Specify ports that you want to block, for multiple ports you can provide comma separated ports, for rang of ports you specify it like 300-310 or 300:320.
Allow Port: Specify ports that you want to allow, for multiple ports you can provide comma separated ports, for rang of ports you specify it like 300-310 or 300:320.
Block IP Address: Specify IPs that you want to block, for multiple IPs you can provide comma separated IPs.
Allow IP Address: Specify IPs that you want to allow, for multiple IPs you can provide comma separated IPs.
Block IP Address With Port: You can block IP Address to specific port using this option.
Allow IP Address With Port: You can allow IP Address to specific port using this option.
Search IP: You can search for rule that contains specified IP.
Default Rules
The following are the iptable rules that virtualizor requires.
/sbin/iptables -I VIRT_INPUT 1 -p tcp -m tcp --dport 4081:4085 -j ACCEPT
/sbin/iptables -I VIRT_INPUT 2 -p tcp -m tcp --dport 5900:7000 -j ACCEPT
/sbin/iptables -I VIRT_INPUT -p tcp -m multiport --dport 25,80,443,587 -j ACCEPT
/sbin/iptables -I VIRT_INPUT -p tcp -m multiport --dport 8443,2087,2086,10000 -j ACCEPT
/sbin/iptables -A VIRT_INPUT -i lo -j ACCEPT
/sbin/iptables -A VIRT_INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A VIRT_OUTPUT -p icmp --icmp-type echo-request -j ACCEPT
/sbin/iptables -A VIRT_INPUT -p icmp --icmp-type echo-reply -j ACCEPT
/sbin/iptables -A VIRT_INPUT -p icmp --icmp-type echo-request -j ACCEPT
/sbin/iptables -A VIRT_OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
We also add Domain forwarding PORTS in iptables rules.