# How to Create Vultr Firewall Rules Vultr Firewall rules enable traffic filtering using port numbers and source IP addresses for incoming network requests. A Vultr Firewall group contains multiple rules that define specific the flow of network traffic to attached instances. Follow this guide to create Vultr Firewall rules using the Vultr Customer Portal, API, or CLI. === "Vultr Customer Portal" 1. Navigate to **Products**, expand the **Network** drop-down and select **Firewall** from the list of options. ![Select Firewall](https://docs.vultr.com/public/doc-assets/collection-items/312/93b77bb5-a899-4bb5-bb98-4fd16cfbe74a.png) 1. Select your target firewall group to manage it. ![Select Firewall Group](https://docs.vultr.com/public/doc-assets/collection-items/312/fc2418e6-124e-47bd-a9d6-453e3fa0d607.png) 1. Click your target network type on the left navigation menu to modify the incoming traffic rules. ![Select Network Type](https://docs.vultr.com/public/doc-assets/collection-items/312/b5ceb5fe-7868-4733-86fe-c9d7bdac1e93.png) 1. Click the **Protocol** drop-down to select a common network application profile or choose **Custom** from the list and enter your target network port in the **Port (or range)** field. ![Set Up a new Firewall Rule](https://docs.vultr.com/public/doc-assets/collection-items/312/a682a598-90d6-4dd2-9b3e-f273843b4460.png) 1. Click the **Source** drop-down, select your traffic source and enter the target source IP address. 1. Click **Add note** and enter a descriptive label to identify the new firewall rule. 1. Click **Add Firewall Rule** within the **Action** section to apply the new rule to your firewall group. ![View Firewall Rules](https://docs.vultr.com/public/doc-assets/collection-items/312/bc4c004f-cf01-4436-b741-03cf31f82644.png) === "Vultr API" 1. Send a `GET` request to the [**List Firewall Groups** endpoint](https://www.vultr.com/api/#tag/firewall/operation/list-firewall-groups) and note the target firewall group ID in your output. ```console $ curl "https://api.vultr.com/v2/firewalls" \ -X GET \ -H "Authorization: Bearer ${VULTR_API_KEY}" ``` 1. Send a `GET` request to the [**List Firewall Rules** endpoint](https://www.vultr.com/api/#tag/firewall/operation/list-firewall-group-rules) to view all active rules in the firewall group. ```console $ curl "https://api.vultr.com/v2/firewalls/{firewall-group-id}/rules" \ -X GET \ -H "Authorization: Bearer ${VULTR_API_KEY}" ``` 1. Send a `POST` request to the [**Create Firewall Rules** endpoint](https://www.vultr.com/api/#tag/firewall/operation/post-firewalls-firewall-group-id-rules) to create a new rule in the firewall group. ```console $ curl "https://api.vultr.com/v2/firewalls/{firewall-group-id}/rules" \ -X POST \ -H "Authorization: Bearer ${VULTR_API_KEY}" \ -H "Content-Type: application/json" \ --data '{ "ip_type" : "", "protocol" : "", "port" : "", "source" : "", "notes" : "" }' ``` Visit the [**List Firewall Rules** API page](https://www.vultr.com/api/#tag/firewall/operation/post-firewalls-firewall-group-id-rules) to view additional attributes to apply on the firewall rule. === "Vultr CLI" 1. List all firewall groups in your Vultr account and note the target firewall group ID. ```console $ vultr-cli firewall group list ``` 1. List all rules in the firewall group. ```console $ vultr-cli firewall rule list ``` 1. Create a new firewall rule. ```console $ vultr-cli firewall rule create --id= --ip-type= --protocol= --source= --port= ``` Run `vultr-cli firewall rule create --help` to view additional options to apply on the firewall rule.

Firewall

Firewall

Provisioning

Delete

Groups

Link

Rules

Firewall

FAQ