Overview
Virtualizor allows administrators to secure their Host Nodes by applying firewall rules at the Server Level, . Using the Server Firewall feature, you can restrict access to the host node’s services (such as SSH, Web Panel, etc.) and only allow traffic from trusted IPs.
This feature is useful for:
* Blocking unauthorized access attempts to the node
* Allowing only specific management IPs (e.g., master panel or internal monitoring)
* Protecting services running on the host server (e.g., port 4085, SSH)
Server Firewall Options
To Apply the firewall rules to the Server, You can access and configure the Server Firewall from:
Admin Panel → Firewall → Server Firewall Status
Or from Admin Panel → Servers → Edit Server → Choose Firewall Plan
Firewall plans can include the following rule types:
Option | Description
Direction | IN, OUT
IP Type | IPV4
Decision | Accept , Drop
Protocol | TCP, ICMP
Port | Port number or range (e.g., 22, 80)
IP | The IP address or subnet allowed/blocked
To apply firewall plan to node:
From Server Firewall Status page :
1. Go to Admin Panel → Firewall → Server Firewall Status
2. Select the Server on which you want to apply rules.
3. Select a plan from the dropdown .
4. Apply the plan.
From List server page:
1. While adding or editing a server, locate the Choose Firewall Plan option.
2. Select an existing firewall plan from the list.
3. Save the changes to apply the plan automatically.
List Firewall Plans
To list the Server firewall plans you can navigate to Firewall --> List Firewall Plans. All firewall plans created by Admin will list here.
Add Firewall Plans
To add/create Plan you can navigate to Admin panel → Firewall → Add Firewall Plan.
Terminology
- Direction : The direction of the packets to and from the Node. Possible values IN/OUT
- IP Type : Version of the IP protocol. Currently IPv4 only.
- Decision :
Accept(allow traffic) orDrop(block traffic)
- Protocol : TCP, UDP, GRE, ESP, ICMP Protocols that are supported.
- Port : Port number or range (e.g., 22, 80)
- IP : IP for which rule is to be applied. (Valid Entries : Individual IP address or 0.0.0.0/0 for all IPs)