Skip to content
  • GDPR-compliant
  • 100% hosting in Germany
  • Personal contact
  • Support included
  • Provisioning within 24 hours
EN
Customer portal
Network & firewall 2 min read

Cloud server firewall: rules, quick rules and log

In front of every cloud server sits a firewall at virtualisation level. It filters traffic before it reaches your operating system and is already active before the first start. In addition, it prevents your server from sending with foreign IP or MAC addresses. You manage it in the Firewall tab.

The initial state

  • Incoming: the default is DROP - anything not allowed by a rule is discarded.
  • Outgoing: the default is ACCEPT - your server may establish outbound connections.
  • For each IP address there is a rule Allow All (default) that allows incoming traffic to this address. This means your server is initially fully reachable after setup.

If you want to restrict access, create rules for the services you need (for example SSH, HTTP and HTTPS) and then disable or delete the Allow All (default) rule.

Firewall management with switch and default policies for incoming and outgoing traffic
Firewall management with the default policies.

Creating rules

  1. Click Add rule or choose a quick rule (for example SSH, HTTP/HTTPS or typical ports for Linux and Windows).
  2. Define direction (incoming/outgoing), action (ACCEPT, DROP or REJECT), protocol (all, TCP, UDP, ICMP) and optionally destination port, source and destination. A comment helps you find it again later.
  3. Save - the rule applies immediately.

Mind the order: rules are checked from top to bottom, the first matching one decides. Drag rules to the right position with drag & drop. You can temporarily disable individual rules with the switch. Up to 50 rules are possible.

List of firewall rules with quick rules and the "Add rule" button
Quick rules and the list of your rules.
"Add rule" dialogue with direction, action, protocol, port, source and destination
Creating a rule.

Allow first, then block

Create the rule for SSH before you remove the "Allow All (default)" rule - otherwise you lock yourself out. If you can no longer reach the server via SSH, the web console helps; it is not affected by the firewall.

Turning off the firewall

You can deactivate the firewall with the switch at the top. Caution: this deletes your rules, and incoming traffic is accepted completely. When you activate it again, you start with the "Allow All (default)" rule again. You can additionally run a firewall in the operating system (for example nftables, ufw or firewalld).

Firewall log

The Firewall log tab shows the last up to 500 entries of the firewall: dropped or rejected packets in red, accepted ones in green. With Live tracking the list refreshes every few seconds - handy for checking a new rule.

Is the console affected by the firewall?
No. The web console accesses the server screen directly and also works with blocked ports.
Does the firewall also apply to additional IP addresses?
Yes. Every address receives its own "Allow All (default)" rule when added, which you adjust like the other rules.

Was this article helpful?

New to SpeedIT Solutions?

Hosting where you know someone.

What you are reading here is what we put into practice for our customers every day. Based in Isernhagen since 2009 - with dedicated contact persons rather than a call centre.

  • 100% hosted in Germany
  • GDPR-compliant
  • Dedicated contact person
  • Provisioning within 24 hours
View plans Request advice
4.9 88 reviews on Expeero

gute Erreichbarkeit

sehr guter Service
Gerhard G.Recommends us · 08/07/2026

100 % recommend us · Expeero

All reviews on HOSTtest (opens in a new window)

You might also be interested in:

Personal support

Of course, our support team is also happy to assist you personally. If you cannot find what you are looking for in our knowledge base or require personalised support, please do not hesitate to contact us. We’re here to help you and to ensure that your experience with our products and services is as smooth and enjoyable as possible.