Allowing or blocking an IP address through your server’s firewall on ULTRA Cloud
Scout lets you allow an individual IP address through your server’s firewall. An allowed IP can reach the server on all ports, which makes this the quickest way to get at services that aren’t open to the public – SFTP/SSH or remote MySQL, for example.
This setting applies to the server only. It covers every site hosted on that server, and it is separate from any site-level or application firewall (WAF) trusted IP lists.
Allowing an IP address
- Log in to ULTRA Cloud
- Navigate to Servers
- Open the server’s Settings
- Select the Firewall tab
- Scroll down to Allow an IP – your current IP address is filled in for you
- Enter the IP address you want to allow, and add a short comment so you can identify the entry later
- Click Allow IP
The address then appears in the Allowed IPs list and can connect to the server on any port. To remove an entry again, click the bin icon beside it.
Blocking an IP address
The Block an IP field on the same page works in exactly the same way. Blocked addresses cannot reach the server or any of the sites on it, so take care not to block your own IP – Scout shows it next to the field as a reminder.
Ports and security
By default ULTRA Cloud opens ports 80, 443 and 2223, and everything else is closed to the public. Because allowing an IP takes only a few seconds, we recommend removing port 2223 from the Open ports list so that SSH and SFTP can only be reached from the addresses in your Allowed IPs list. The same approach applies to remote MySQL: allow the connecting IP rather than opening port 3306 to the world.