Manage Web Hosting & Cloud Server firewall

This guide explains how to allow certain ports entering and/or leaving the firewall (or Firewall) of a Web hosting or of a Cloud Server.

Preamble

• On one shared web hosting, it is only possible to open ports in Get out.
• On one Cloud Server, it is possible to open ports in entry and in Get out.
• The opening of ports ensures the proper functioning of some applications but may reduce the security of your hosting.

Access the tool and add a rule

To manage port opening from the Manager:

1. Click here in order to access the management of your product on the Manager Infomaniak (Need help?).
2. Click directly on the nameallocated to the product concerned.
3. Click on Security in the left side menu.
4. Click on Opening of ports in the left side menu.
5. Click on the button Open Port:
   

It is possible to put only one IP or host per line, and only one port per rule.

By indicating an IP or a host, the connection will only be allowed in these cases:

• Règle entrante: if the connection comes from this IP or the specified host
• Règle sortante: if the connection is made to this IP or host

Same for "Type" connection, if the protocol used for the connection is not that specified in the rule, the connection is not allowed.

Open the outgoing port 25 globally

You can open the outgoing port 25 from the AIFM if a destination host is specified.

With a Cloud Server, to open this port to the whole world, contact Infomaniak support justifying your request.

Default Open Ports

Once accessed to the port opening tool, you will find the list of ports opened by default on the page.

With a Cloud Server, to close some of the ports listed, contact Infomaniak support justifying your request.

The display can sometimes be done on several pages:

MySQL ports

About database ports, check out these guides:

• Database access from other hosting
• Connecting a Cloud Server to an external database
   

Check port activity (Cloud Server)

On Cloud Server, to check if an application is listening to a particular port (1234 in the example below) and to know the name of the application in question, run in SSH:

netstat -anpe | grep "1234" | grep "LISTEN"