---
title: How to open ports on VPS
description: "Your VPS is protected by a firewall that controls network traffic. If you want to connect via SSH, run a website, or allow access to a specific service, you need to add firewall rules. ## Access the firewall interface 1.…"
url: "https://www.host-age.com/kb/vps/how-open-ports-vps/"
updated: "2025-08-28"
category: VPS
---

# How to open ports on VPS

Your VPS is protected by a firewall that controls network traffic. If you want to connect via SSH, run a website, or allow access to a specific service, you need to add firewall rules.

## Access the firewall interface

1. Log in to your **Client Account** at [my.host-age.ro](https://my.host-age.ro).
2. Select the desired VPS.
3. Go to the **Network > Firewall** section.
4. Click **Add new rule**. A window will open as shown in the image below.

[![VPS firewall configuration](https://www.host-age.com/wp-content/uploads/2025/08/configurare-firewall-vps-1.png)](https://www.host-age.com/wp-content/uploads/2025/08/configurare-firewall-vps-1.png)

## **Explanation of the fields in the configuration window**

- **Interface:** usually `net0` – the main network interface of the VPS (do not change).
- **Direction:**
  - `IN` → traffic entering the VPS (rules are usually added here).
  - `OUT` → traffic leaving the VPS (normally left open).
- **Macro:** predefined shortcuts (e.g. HTTP, HTTPS, SSH). If you want to manually choose the ports, leave it as `-`.
- **Action:** `ACCEPT` → allow traffic; `DROP` → block traffic.
- **Protocol:** `TCP` or `UDP`, depending on the application.
- **Source / Port:** the IP address and port from which the traffic originates (you can leave empty to allow access from anywhere).
- **Destination / Port:** the VPS IP and port you want to open (e.g. port 22 for SSH).
- **Log level:** `nolog` – rules are not logged (can be left as is).

## Examples of useful rules

### SSH Access (server administration)

- **Direction:** IN
- **Action:** ACCEPT
- **Protocol:** TCP
- **Destination / Port:** `22`
- Then click **Submit**.

### HTTP Access (websites)

- **Direction:** IN
- **Action:** ACCEPT
- **Protocol:** TCP
- **Destination / Port:** `80`

### HTTPS Access (secure websites)

- **Direction:** IN
- **Action:** ACCEPT
- **Protocol:** TCP
- **Destination / Port:** `443`

### Other services (examples)

- **FTP:** TCP port 21
- **Mail (SMTP):** TCP port 25 (note: many providers block outbound traffic on port 25 to prevent spam).
- **MySQL:** TCP port 3306

## **Rules for updates and package installation**

For the operating system to update and download packages:

- **Outbound** (OUT) traffic must be allowed on the following ports:
  - **53 (TCP/UDP)** – DNS
  - **80 (TCP)** – HTTP
  - **443 (TCP)** – HTTPS

Usually the OUT firewall is allowed by default, but if it is blocked these rules need to be added as well.

## **Security recommendations**

- Allow **SSH (22)** only from your fixed IP, if possible (in the *Source IP* field).
- Do not open more ports than necessary.
- Always test using: `nc -zv IP_ADDRESS PORT` or from a browser (for ports 80/443).