Skip to main content

Firewall

Firewall is ALLOW and DENY rules for the announced prefix. Status chips show edge apply progress. You edit rules in the browser; Templass applies them on the scrubbing side.

The heading line is ALLOW and DENY rules for the announced prefix. Changes are pushed to the edge automatically. CIDRs and ports use the announced prefix for this tunnel or Cross-Connect.

Add a rule​

  1. Open Firewall. Confirm Dashboard shows an open Service window.

  2. Under Add firewall rule, set:

    FieldWhat it does
    ActionALLOW or DENY
    ProtocolANY, or the transport Panel lists
    Source CIDRSource prefix to match
    Dest portSingle port (80) or a range (25565-25570)
    DescriptionShort note (for example game traffic, scanner)

  3. Click Add rule.

  4. Confirm the row appears under Rules with Status moving to Active and an Applied timestamp.

Each rule has Edit and Remove.

After you save​

Changes applying on Overview increments until the edge finishes. Avoid create/delete loops on the same rule. If a rule stays pending, open a Ticket with the rule summary and the time you clicked Add rule.

During a live attack, prefer one clear change over several experimental ones. See Under attack.

Practical tips​

  • Allow the ports you actually serve. Request missing listeners via Port requests.
  • Keep DENY rules specific so you do not lock yourself out.
  • Prefer keeping management access (SSH, RDP, provider APIs) off the protected prefix.

Firewall works together with routing and quoted clean Mbps. An origin IP you publish yourself still bypasses Templass. See Routing and Clean bandwidth.