# Managing Firewall Rules

Control which ports and source IPs can reach your VPS.

## Steps

1. Open your VPS, then go to its **Firewall** tab.
   ![The VPS Firewall tab listing firewall rules](https://kencana.basic.box.cloudeka.id/bucketku-f4kxct/sumopod-doc/Guides/12-vps/09-manage-firewall/01-tab-firewall.png)
2. Click **Add Rule**.
3. Choose an **Application Type** (a preset like SSH/HTTP, or custom), set the **Protocol** and **Port Range** (e.g. `3306` or `8000-8080`), and the **Source IP Address** (e.g. `0.0.0.0/0` for anywhere, or a specific CIDR like `192.168.1.0/24`).
   ![The Add Rule dialog with application type, protocol, port range, and source IP fields](https://kencana.basic.box.cloudeka.id/bucketku-f4kxct/sumopod-doc/Guides/12-vps/09-manage-firewall/02-dialog-add-rule.png)
4. Optionally add a **Description**, then save the rule.

## Notes

- By default, a VPS has an "Allow All Request" rule (all protocols, all ports, source `0.0.0.0/0`) — tighten this for production use.
- Direct link: open your VPS, then go to its **Firewall** tab.