Configure a UFW Firewall on Your Opus Host VPS

Every VPS exposed to the public internet is a target. UFW (Uncomplicated Firewall) is the simplest way to lock down your Opus Host VPS: you allow the ports you actually use, deny the rest, and stop worrying about random probes hitting unused services.

Always allow SSH before enabling UFW. If you enable the firewall without allowing port 22 first, you will lock yourself out of your own server and need to use the in-browser console to recover.

Install UFW

UFW is preinstalled on most images. If it is missing, install it with:

sudo apt update
sudo apt install ufw -y

Set default rules

Block all incoming traffic by default and allow all outgoing traffic. This is the safe baseline.

sudo ufw default deny incoming
sudo ufw default allow outgoing

Allow the ports you need

Allow SSH first

sudo ufw allow 22/tcp

Allow web traffic if you run a website

sudo ufw allow 80/tcp
sudo ufw allow 443/tcp

Allow any custom ports your app needs

# Example: Minecraft server
sudo ufw allow 25565/tcp

Enable the firewall

sudo ufw enable

Check status and rules

sudo ufw status verbose
sudo ufw status numbered

Remove a rule

# Remove by rule spec
sudo ufw delete allow 80/tcp

# Or remove by number from `status numbered`
sudo ufw delete 3

Disable UFW

sudo ufw disable

Only open the ports you actually need. Every open port is one more thing to keep patched.

⌘I

Get Started

Control Panel

Managing Your VPS

Guides

Account & Billing

FAQ & Support

Configure a UFW Firewall on Your Opus Host VPS

Install UFW

Set default rules

Allow the ports you need

Check status and rules

Remove a rule

Disable UFW

​Install UFW

​Set default rules

​Allow the ports you need

​Check status and rules

​Remove a rule

​Disable UFW

Install UFW

Set default rules

Allow the ports you need

Check status and rules

Remove a rule

Disable UFW