The Firewalls screen lists your firewalls (or security groups). Each card shows how many rules it has, what it's applied to, and a few example rules. Tapping a card opens it as Edit › where you can change it, or View › where the provider only allows reading (Google Cloud firewalls are view-only).
Creating a firewall
Tap Create (read/write connections) to open the editor with a blank firewall. Give it a name, add rules, then Create firewall.
Rules
The editor shows how the provider treats traffic:
- Stateful — return traffic is allowed automatically, so you usually only write inbound rules.
- Stateless — each direction needs its own rule.
Tap + Add rule and set:
- Direction — Inbound or Outbound (some providers are inbound-only, and say so).
- Protocol —
tcp,udp,icmp,gre, oresp. A Port field appears for TCP/UDP (e.g.443or a range8000-8080). - Source / Destination IPs — one CIDR per line. Use + Any IPv4 (
0.0.0.0/0) or + Any IPv6 (::/0) as shortcuts.
Save rules with Save rules.
Applying a firewall
On an existing firewall you can Apply to… a target (a server, an IP, or a network interface) and Remove from… one. The picker only offers the target types the provider supports.
Deleting
Delete firewall removes it. Some providers refuse this while the firewall is still attached to something (common on AWS) — detach it first.
Notes by provider
- Google Cloud firewalls are view-only in the app — open the console to change them.
- AWS shows a security group's attached targets only after you open it.
- Vultr doesn't support renaming a firewall (set the name when you create it).
- For anything the app can't model — such as Azure's allow/deny priorities — use Open in console ↗ on the firewall.