Security

Configure Firewall

A properly configured firewall is your first line of defense. We recommend closing all ports except those you actually use.

Warning

Wait! Before enabling any firewall, ensure you have allowed your SSH (22) or RDP (3389) port, or you will lock yourself out!

Linux (UFW)

Ubuntu/Debian comes with UFW (Uncomplicated Firewall). Here are the basic commands:

# Allow SSH (Important!)
ufw allow 22/tcp

# Allow HTTP/HTTPS
ufw allow 80/tcp
ufw allow 443/tcp

# Enable the firewall
ufw enable

# Check status
ufw status verbose

Windows Defender Firewall

Search for Windows Defender Firewall with Advanced Security.
Click Inbound Rules > New Rule.
Select Port and specify TCP/UDP and the port number (e.g., 80 for Web).
Choose Allow the connection.
Apply to Domain, Private, and Public profiles.
Name your rule and finish.

Edge Firewall (Path.net)

HostCraft uses Path.net for DDoS mitigation. While this filters attack traffic, it does not block specific ports by default. You should configure the detailed firewall rules in the Client Panel under your service details for edge-level dropping of unwanted traffic.