.svg)
.svg)
.svg)
.svg)
.svg)
This guide explains how to configure firewall rules directly from the LumaDock control panel. You can allow ping (ICMP), whitelist your IP, and open ports for VPNs like OpenVPN or WireGuard — all without needing to access the server itself.
1. What You Need to Know
- Rules are checked from top to bottom — order matters.
- If you add a Drop All rule without first allowing SSH or RDP, you can lock yourself out of your LumaDock VPS.
- Start with safe rules, test connectivity, and then tighten security.
2. Recommended Setup Steps
- Allow your own IP for SSH/RDP/VPN access.
- Allow ICMP (ping).
- Open the necessary VPN ports (e.g., OpenVPN or WireGuard).
- (Optional) Allow all outbound traffic.
- (Optional) Drop all other incoming connections.
How to Add Rules in LumaDock
Log in to your LumaDock client area, go to Services → Your VPS → Firewall tab to start adding rules.
1. Allow your own IP (SSH / RDP / VPN)
Direction: Inbound
Action: Accept
Protocol: TCP
Port: 22 (for SSH) or 3389 (for RDP)
Source IP: your public IP (e.g., 123.123.123.123)
Comment: Allow admin IP2. Allow ICMP (Ping)
Direction: Inbound
Action: Accept
Protocol: ICMP
Port: (leave blank)
Source IP: (leave blank)
Comment: Allow ping3. Allow VPN Ports
For OpenVPN (UDP 1194):
Direction: Inbound
Action: Accept
Protocol: UDP
Port: 1194
Source IP: (optional)
Comment: Allow OpenVPNFor WireGuard (UDP 51820):
Direction: Inbound
Action: Accept
Protocol: UDP
Port: 51820
Source IP: (optional)
Comment: Allow WireGuard4. Allow Outbound Traffic (optional)
Direction: Outbound
Action: Accept
Protocol: Any
Port: Any
Destination IP: Any
Comment: Allow all outbound5. Drop All Other Inbound Traffic (optional, add last)
Direction: Inbound
Action: Drop
Protocol: Any
Port: Any
Source IP: Any
Comment: Drop all other trafficExample Rule Set for a VPN Server
| Direction | Action | Protocol | Port | Source IP | Comment |
|---|---|---|---|---|---|
| Inbound | Accept | TCP | 22 | 123.123.123.123 | SSH from your IP |
| Inbound | Accept | UDP | 1194 | Any | OpenVPN |
| Inbound | Accept | ICMP | Any | Any | Allow ping |
| Outbound | Accept | Any | Any | Any | Allow all outbound |
| Inbound | Drop | Any | Any | Any | Drop everything else |
Tips for LumaDock Users
- Always whitelist your IP first to avoid losing access to your LumaDock VPS.
- You can use
123.123.123.123for a single IP or192.168.0.0/24to allow an entire subnet. - Use meaningful comments to organize your rules.
- Apply one rule at a time and test it before adding restrictive ones like DROP ALL.
If you're not sure what to allow, or you lose access after a rule change, just contact LumaDock support. We're here to help you get back online safely.
