View source for Firewall Options - VPS/Dedicated

== IPS & Firewall Protection ==
Hostek protects it's VPS customers with perimeter load balanced IPS’s (DDOS, deep packet inspection for known threats) which also act as a firewall (blocking). Customers have three options for the protection of their VPS, by default servers will be in the Protected port group:

#Protected (supports most common ports*, DDOS, deep packet inspection)
#PCI (restricted to a few ports, DDOS, deep packet inspection)
#Server Managed (less restrictive, no port blocking, no deep packet inspection, includes DDOS)

*Note in the default group there are some additional ports open for custom applications, contact support and we will provide the port numbers.

== Customizable Firewall Options ==
In our VPS/Dedicated Firewall Protected port group (Number 1 above), we open commonly utilized ports.  If you need a non-standard fixed port to be open, contact support to have your VPS moved to the "Server Managed" group. If your application can be set to use an alternate port, there are a few alternate ports open for this purpose, contact support for more details. However keep in mind traffic to your server will be rate limited for DDOS protection but there will be no port blocking. RECOMMENDED - unneeded ports can be blocked from the software firewall on your server. This can be managed easily for Windows VPS's from WCP (limited control) or more extensive control for Windows thru Microsoft Remote Desktop or for Linux cPanel Servers use ConfigServer Firewall.

== Windows Firewall ==
=== Opening a Port in Windows Firewall ===
To open a port in your VPS's Windows Firewall, you'll need to perform the following steps:
#Click the '''Start''' button, open the '''Administrative Tools''' menu, then click '''Windows Firewall with Advanced Security'''.<br />[[File:openfirewallport-step01.png]]
#Click the '''Inbound Rules''' section, then click the '''New Rule''' link at the right side of the window.<br />[[File:openfirewallport-step02.png]]
#Select '''Port''' and click '''Next'''.<br />[[File:openfirewallport-step03.png]]
#Enter the port you wish to open in the '''Specific local ports''' section. For example, if you wish to open MySQL you'd enter 3306. You can also open multiple ports at a time by separating the ports with commas.<br />[[File:openfirewallport-step04.png]]
#Make sure '''Allow the connection''' is selected and click '''Next'''.<br />[[File:openfirewallport-step05.png]]
#Make sure '''Domain''', '''Private''', and '''Public''' are selected and click '''Next'''.<br />[[File:openfirewallport-step06.png]]
#Now you just need to enter a name for the rule and click '''Finish'''<br />[[File:openfirewallport-step07.png]]
=== Restricting Access to a Port ===
#First, open '''Windows Firewall with Advanced Security''' by clicking the '''Start''' button, opening the '''Administrative Tools''' menu, then clicking '''Windows Firewall with Advanced Security'''.<br />[[File:openfirewallport-step01.png]]
#Right-click on the rule you wish to edit, and click '''Properties'''
#Click the '''Scope''' tab in the pop-up that appears.<br />[[File:restrictfirewallport-step03.png]]
#Under '''Remote IP Addresses''' select '''These IP addresses''' then click '''Add'''.
#In the popup that appears, you will choose what IP will have access to the port defined in your rule. For example, if you wish to restrict access to your local computer, you'd enter your computer's IP address in the '''This IP address or subnet''' section. FYI, to find your computer's IP address, you can use [http://hostek.com/ip/ our IP finder]. <br />[[File:restrictfirewallport-step05.png]]
#After entering your IP, click '''OK''' in the '''IP Address''' window. Then click '''OK''' in the rule properties window, and you're done.

[[Category:ColdFusion-VPS]]
[[Category:Railo-VPS]]
[[Category:Windows-VPS]]
[[Category:Email-VPS]]