{"id":7311,"date":"2020-02-04T10:22:32","date_gmt":"2020-02-04T15:22:32","guid":{"rendered":"https:\/\/www.pair.com\/support\/kb\/?post_type=ht_kb&p=7311"},"modified":"2025-08-15T13:29:26","modified_gmt":"2025-08-15T17:29:26","slug":"firewalls","status":"publish","type":"ht_kb","link":"https:\/\/www.pair.com\/support\/kb\/firewalls\/","title":{"rendered":"Firewalls on Hosting Accounts"},"content":{"rendered":"\n

VPS<\/p><\/a>

Dedicated<\/p><\/a>

WP Professional Plus<\/p><\/a><\/span><\/p>\n\n\n\n

Firewalls evaluate your server's network traffic and decide whether it should be allowed or not. It helps protect your network from external threats (such as malware or viruses) and since it is the first network defense that traffic encounters, it's important to set up your firewall correctly. <\/span><\/p>\n\n\n\n

Luckily, all Pair Network servers have firewalls included, so you don't have to worry. They use a standard configuration and ensures that prevents most unauthorized connections to your hosting server. <\/span><\/p>\n\n\n\n

For those with a unique hosting scenario that requires more firewall control, our <\/span>VPS<\/span><\/a>, Dedicated, and <\/span>WP Professional Plus<\/span><\/a> accounts allow the user to make their own firewall configurations. However, it is important to note that while some of the basic firewall configuration can be customized, not all can be changed.\u00a0<\/span><\/p>\n\n\n\n

In order to maintain the server's operation and performance, firewalls may be added or removed by automated systems. For example, if a server is being spammed heavily by bots or remote attackers, a firewall rule may temporarily be put into place to protect the server. <\/span><\/p>\n\n\n\n

Understanding How Firewalls Work<\/h3>\n\n\n\n

Firewalls evaluate your server's network traffic against a set of rules that define whether the network activity should be allowed or disallowed. <\/span><\/p>\n\n\n\n

Information on the Internet is called a \"packet.\" Firewalls will check these packets and make sure that they match the firewall rules. Rules are made up of two parts:<\/span><\/p>\n\n\n\n

    \n
  1.  The first part of a rule defines what packets the rule applies to.<\/span><\/li>\n\n\n\n
  2.  The second part indicates the action that should be taken if the packet fits the requirements. <\/span><\/li>\n<\/ol>\n\n\n\n

    Normally this second part is an \"allow\" or \"deny\" action. So, for example, if you have a packet that fits the requirements for a rule with a deny action, the packet will not be allowed entry to the server. On the other hand, if a packet fits the requirements for a rule with an allow action, the packet will be given access to the server. <\/span><\/p>\n\n\n\n

    Essentially, firewalls are like guards at a gate with specific instructions on what can be let through and what can't be. They have a range of things (rules) they will check and if any traffic does not pass all the requirements, it is barred from entering the inner network. <\/span><\/p>\n\n\n\n

    The entry points that the firewall guards are called ports. They are the only way for traffic to get in and out of the server. Not all ports lead to the same place, so it's important to consider that when setting a firewall rule. <\/span><\/p>\n\n\n\n

    Why Would I Want to Add Firewall Rules<\/h3>\n\n\n\n

    <\/span><\/p>\n\n\n \t\t

    \r\n \t\t\t \t\t\t \t\t\t\t

    \r\n \t\t\t\t\tNote: Firewall configurations can only be customized on VPS<\/a>, Dedicated, and WP Professional Plus<\/a> servers.  \t\t\t\t<\/p>\r\n \t\t\t \t\t\t\r\n \t\t<\/div>\r\n \t\t\n\n\n\n

    Pair Networks sets up hosting accounts with a basic firewall configuration designed to protect your server. So why would you want to add your own rules? <\/span><\/p>\n\n\n\n

    Most of the time, it's not necessary. Our default rules deny access to protected services provided by the server, while still allowing access to public services such as the web server and incoming email server. <\/span><\/p>\n\n\n\n

    However, there are some situations where a custom firewall rule may be beneficial to add a custom firewall rule. Here are some examples:<\/span><\/p>\n\n\n\n

    Your dedicated server runs a custom private service on an open port, such as a standalone web application, and you want to block remote access to that service. <\/span><\/td><\/tr>
    Your dedicated database server allows remote access to the database and you want only specific remote hosts to be able to access it.<\/span><\/td><\/tr>
    Your website is either under maintenance or has been hacked and you want to block everyone from accessing it. <\/span><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    Please note that this is not an exhaustive list of reasons and there may be more scenarios where a custom firewall rule is useful. <\/span><\/p>\n\n\n\n

    It is important to remember that there are other firewall rules in place, which are required to ensure the operation of vital Pair Networks infrastructure. These rules will prevent some customer rules from working completely. <\/span><\/p>\n\n\n\n

    For example, \"deny all from any to any\" will not actually deny all packets; it will only deny packets that weren't previously allowed by a previous Pair Networks firewall rule.<\/span><\/p>\n\n\n\n

    Adding Rules to Your Pair Server Firewall<\/h3>\n\n\n\n

    If you would like to have influence over your firewall, you can create custom firewall rules on <\/span>VPS<\/span><\/a>, Dedicated, and <\/span>WP Professional Plus<\/span><\/a> accounts. This gives you power over what is allowed access to your server and what your server has access to.\u00a0<\/span><\/p>\n\n\n\n

    Note: This tutorial only works on VPS, Dedicated, or WP Professional Plus servers.<\/span><\/i><\/p>\n\n\n\n

    Choose the tutorial that reflects your ACC interface type: <\/p>\n\n\n\n