How to Enable Firewall in HestiaCP

Prerequisites

Before enabling the firewall, make sure you have:

• Admin access to HestiaCP
• Current SSH session (to avoid lockout)

Method 1: Enable via HestiaCP Web Interface

Step 1: Log in to HestiaCP

https://YOUR_SERVER_IP:8083

Step 2: Navigate to SERVER Section

Click on SERVER in the top menu bar.

Step 3: Click Firewall Tab

Click on the Firewall tab.

Step 4: Add SSH Rule First

Click + Add Firewall Rule:

• Action: ACCEPT
• Protocol: TCP
• Port: 22 (or your SSH port)
• IP Address: 0.0.0.0/0 (all)

Step 5: Enable Firewall

Click the Enable Firewall button.

Step 6: Verify

Status changes to Active.

Method 2: Enable via SSH (UFW)

ssh hxroot@YOUR_SERVER_IP -p 22

Allow SSH:

ufw allow 22/tcp

Allow HestiaCP port:

ufw allow 8083/tcp

Enable firewall:

ufw enable

Check status:

ufw status verbose

Default Firewall Rules in HestiaCP

When enabled, HestiaCP typically allows:

Check Firewall Status

ufw status