IP Access Rules (firewall) on your VPS
IP Access Rules allow you to control who can connect to your VPS by whitelisting trusted IP addresses. Any incoming traffic from other IPs will be blocked.
This helps protect your server from unauthorised access, brute‑force attempts, and internet‑wide scanning. It adds an extra security layer beyond passwords or SSH keys.
-
What are IP Access Rules?
IP Access Rules (firewall) let you define which IPv4 or IPv6 addresses are allowed to access your VPS. Only the IPs you approve can reach your server on the ports you specify. This gives you an additional security layer on top of passwords and SSH keys.
This feature is available for unmanaged VPS products at one.com. And only apply to incoming connections to your VPS. Outbound connections from your VPS remain unaffected.
-
Why use IP Access Rules?
IP whitelisting helps you:
- Reduce exposure to unwanted access attempts.
- Protect SSH, databases, and admin interfaces.
- Avoid complex firewall configuration on the server itself.
- Manage access for teams, agencies, or multiple locations.
- Lower the risk of misconfiguration compared to manual iptables rules.
-
What can you do with the firewall?
In the dedicated Firewall section of your VPS in the Control Panel, you can:
- Add new rules for IPv4 or IPv6 addresses.
- Limit access to specific protocols and ports.
- Edit or delete existing rules.
- Reset the default rules if needed.
- Validate IP syntax automatically (including CIDR ranges).
-
What are the default rules? And how to reset them.
Your VPS includes default rules that allow general internet connectivity and internal system access. If you change or delete these rules, connectivity may be affected.
You can restore them at any time using Reset rules.
-
How to add an IP Access Rule
- Go to your VPS dashboard.
- Click on the name of the Cloud Server for which you want to add an IP Access Rule.
- Select Firewall in the left‑hand menu.
- Click Add rule in the top right.
- Select the IP version (IPv4 or IPv6) and one of the Protocols.
- Add the Source.
- Add a comment (optional).
- Save the rule.
-
How specific can rules be?
You can define rules using:
- IP version (IPv4 or IPv6)
- Protocol (TCP, UDP, ICMP, IPv6‑ICMP, AH, ESP, GRE, ALL)
- Source IP or range (CIDR)
- Comment (optional)
-
Can I whitelist multiple IP Access Rules or networks?
Yes. You can add several IP addresses or entire ranges (in CIDR format) as required. This is useful if you access your VPS from different locations or via a VPN.
-
How to edit an existing rule?
- Go to your VPS dashboard.
- Click on the name of the Cloud Server for which you want to edit an IP Access Rule.
- Select Firewall in the left‑hand menu.
- Click on the three dots next to the IP version in the overview of Firewall rules.
- Click Edit rule.
- Edit the firewall rule and click Save.
Note: Changing or deleting a default rule may affect the server’s connectivity to the internet. Use Reset rules to restore the default configuration.
-
What happens if I accidentally block my own IP?
Don’t worry if you lock yourself out. If you still have access to the control panel, you can adjust or remove the rule. If you lose access completely, please contact support to reset your firewall rules.
-
How to delete an existing rule?
- Go to your VPS dashboard.
- Click on the name of the Cloud Server for which you want to edit an IP Access Rule.
- Select Firewall in the left‑hand menu.
- Click on the three dots next to the IP version in the overview of Firewall rules.
- Click Delete rule.
- Confirm the deletion of the firewall rule by clicking Delete.
Note: Changing or deleting a default rule may affect the server’s connectivity to the internet. Use Reset rules to restore the default configuration.
Related articles: