Host-level L4 firewall managing SSH / DB / business ports. All paid plans.
Fields
- port / port_end (range) / proto (tcp/udp)
- direction (in/out) / action (accept/drop)
- src_cidr inbound / dst_cidr outbound
Typical rules
- allow SSH 22 globally
- allow MySQL 13306 only from office src_cidr
- block 25 outbound to prevent mail abuse
vs L7 IP rule_set
firewall L4 drops connections before NK sees them (no logs); ip-rule-set L7 has logs and per-site granularity. See IP Rule Sets.