{"id":5471,"date":"2026-09-11T00:30:12","date_gmt":"2026-09-10T21:30:12","guid":{"rendered":"https:\/\/maram.iq\/blogs\/?p=5471"},"modified":"2026-09-11T00:30:12","modified_gmt":"2026-09-10T21:30:12","slug":"maram-vps-panel-firewall","status":"publish","type":"post","link":"https:\/\/maram.iq\/blogs\/maram-vps-panel-firewall\/","title":{"rendered":"\u062c\u062f\u0627\u0631 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0641\u064a \u0644\u0648\u062d\u0629 \u0645\u0631\u0627\u0645 \u0647\u0648\u0633\u062a: \u0641\u062a\u062d \u0627\u0644\u0645\u0646\u0627\u0641\u0630 \u0648\u0625\u063a\u0644\u0627\u0642\u0647\u0627 \u0644\u0643\u0644 \u062a\u0637\u0628\u064a\u0642"},"content":{"rendered":"\n

\u062b\u0628\u0651\u062a\u0651 \u062a\u0637\u0628\u064a\u0642\u064b\u0627 \u0639\u0644\u0649 \u0633\u064a\u0631\u0641\u0631\u0643 \u0648\u0644\u0627 \u064a\u0641\u062a\u062d \u0645\u0646 \u0627\u0644\u0645\u062a\u0635\u0641\u062d\u061f \u0623\u0648 \u062a\u0631\u064a\u062f \u0627\u0644\u062a\u0623\u0643\u062f \u0623\u0646 \u0642\u0627\u0639\u062f\u0629 \u0628\u064a\u0627\u0646\u0627\u062a\u0643 \u063a\u064a\u0631 \u0645\u0643\u0634\u0648\u0641\u0629 \u0644\u0644\u0639\u0627\u0644\u0645\u061f \u0627\u0644\u0623\u0645\u0631 \u0643\u0644\u0647 \u064a\u062a\u0639\u0644\u0642 \u0628\u0627\u0644\u0645\u0646\u0627\u0641\u0630 (Ports)<\/strong>. \u0641\u064a \u0644\u0648\u062d\u0629 \u0645\u0631\u0627\u0645 \u0647\u0648\u0633\u062a \u062c\u062f\u0627\u0631 \u062d\u0645\u0627\u064a\u0629 \u064a\u0639\u0645\u0644 \u0642\u0628\u0644 \u0623\u0646 \u064a\u0635\u0644 \u0623\u064a \u0627\u062a\u0635\u0627\u0644 \u0625\u0644\u0649 \u0633\u064a\u0631\u0641\u0631\u0643\u060c \u0648\u0645\u0646 \u062e\u0644\u0627\u0644\u0647 \u062a\u0641\u062a\u062d \u0627\u0644\u0645\u0646\u0641\u0630 \u0627\u0644\u0630\u064a \u064a\u062d\u062a\u0627\u062c\u0647 \u062a\u0637\u0628\u064a\u0642\u0643 \u0648\u062a\u064f\u0628\u0642\u064a \u0627\u0644\u0628\u0627\u0642\u064a \u0645\u063a\u0644\u0642\u064b\u0627. \u0641\u064a \u0647\u0630\u0627 \u0627\u0644\u062f\u0644\u064a\u0644 \u0646\u0634\u0631\u062d \u0635\u0641\u062d\u0629 Firewall \u0628\u0644\u0642\u0637\u0627\u062a \u062d\u0642\u064a\u0642\u064a\u0629\u060c \u0645\u0639 \u062c\u062f\u0648\u0644 \u0628\u0645\u0646\u0627\u0641\u0630 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0634\u0627\u0626\u0639\u0629 \u0648\u0637\u0631\u064a\u0642\u0629 \u0641\u062d\u0635 \u0627\u0644\u0645\u0646\u0641\u0630 \u0645\u0646 \u062c\u0647\u0627\u0632\u0643.<\/p>\n\n\n\n

⚡ \u0627\u0644\u0625\u062c\u0627\u0628\u0629 \u0627\u0644\u0645\u062e\u062a\u0635\u0631\u0629<\/p>

\u0645\u0646 \u0635\u0641\u062d\u0629 \u0633\u064a\u0631\u0641\u0631\u0643 \u0627\u0641\u062a\u062d Firewall<\/strong> \u2190 Create Firewall Rule<\/strong>\u060c \u0648\u0627\u062e\u062a\u0631 Action = ACCEPT<\/strong> \u0648Type = in<\/strong> \u0648Protocol (TCP \u0623\u0648 UDP)\u060c \u0648\u0627\u0643\u062a\u0628 \u0631\u0642\u0645 \u0627\u0644\u0645\u0646\u0641\u0630 \u0641\u064a Destination Port<\/strong>\u060c \u0648\u0641\u0639\u0651\u0644 Enable\u060c \u062b\u0645 Confirm. \u0648\u0644\u0627 \u062a\u0646\u0633\u064e \u0627\u0644\u0633\u0645\u0627\u062d \u0628\u0627\u0644\u0645\u0646\u0641\u0630 \u0646\u0641\u0633\u0647 \u0641\u064a \u062c\u062f\u0627\u0631 \u0627\u0644\u0633\u064a\u0631\u0641\u0631 \u0627\u0644\u062f\u0627\u062e\u0644\u064a: sudo ufw allow 8080\/tcp<\/code>.<\/p><\/div>\n\n\n\n

\u062c\u062f\u0627\u0631\u0627\u0646 \u0644\u0627 \u062c\u062f\u0627\u0631 \u0648\u0627\u062d\u062f<\/h2>\n\n\n\n

\u0623\u064a \u0627\u062a\u0635\u0627\u0644 \u0645\u0646 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u064a\u0645\u0631\u0651 \u0628\u0637\u0628\u0642\u062a\u064a\u0646 \u0642\u0628\u0644 \u0623\u0646 \u064a\u0635\u0644 \u062a\u0637\u0628\u064a\u0642\u0643\u060c \u0648\u064a\u062c\u0628 \u0623\u0646 \u062a\u0633\u0645\u062d \u0628\u0647 \u0627\u0644\u0637\u0628\u0642\u062a\u0627\u0646 \u0645\u0639\u064b\u0627<\/strong>:<\/p>\n\n\n\n

🌐<\/div>\u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a<\/strong>
\u0632\u0627\u0626\u0631 \u0623\u0648 \u062a\u0637\u0628\u064a\u0642<\/div><\/div>
←<\/div>
🛡️<\/div>\u062c\u062f\u0627\u0631 \u0644\u0648\u062d\u0629 \u0645\u0631\u0627\u0645<\/strong>
Firewall \u2014 \u0642\u0628\u0644 \u0627\u0644\u0633\u064a\u0631\u0641\u0631<\/div><\/div>
←<\/div>
🧱<\/div>ufw \u062f\u0627\u062e\u0644 \u0627\u0644\u0633\u064a\u0631\u0641\u0631<\/strong>
\u0641\u064a Ubuntu \u0648Debian<\/div><\/div>
←<\/div>
✅<\/div>\u062a\u0637\u0628\u064a\u0642\u0643<\/strong>
Nginx\u060c n8n\u060c \u0642\u0627\u0639\u062f\u0629 \u0628\u064a\u0627\u0646\u0627\u062a\u2026<\/div><\/div><\/div>\n\n\n\n

\u0645\u064a\u0632\u0629 \u062c\u062f\u0627\u0631 \u0627\u0644\u0644\u0648\u062d\u0629 \u0623\u0646\u0647 \u064a\u062d\u0645\u064a \u0627\u0644\u0633\u064a\u0631\u0641\u0631 \u062d\u062a\u0649 \u0644\u0648 \u0623\u062e\u0637\u0623\u062a \u0641\u064a \u0625\u0639\u062f\u0627\u062f ufw\u060c \u0648\u064a\u0645\u0646\u0639 \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0644\u0645\u0631\u0641\u0648\u0636\u0629 \u0645\u0646 \u0627\u0633\u062a\u0647\u0644\u0627\u0643 \u0645\u0648\u0627\u0631\u062f \u0633\u064a\u0631\u0641\u0631\u0643 \u0623\u0635\u0644\u064b\u0627.<\/p>\n\n\n\n

\u0635\u0641\u062d\u0629 Firewall<\/h2>\n\n\n\n

\u0645\u0646 \u0627\u0644\u062e\u062f\u0645\u0627\u062a \u2190 \u0645\u0646\u062a\u062c\u0627\u062a\u064a \u0648\u062e\u062f\u0645\u0627\u062a\u064a<\/strong> \u0627\u0641\u062a\u062d \u0633\u064a\u0631\u0641\u0631\u0643 \u062b\u0645 Firewall<\/strong>. \u0643\u0644 \u0633\u0637\u0631 \u0642\u0627\u0639\u062f\u0629 \u062a\u0633\u0645\u062d \u0628\u0645\u0646\u0641\u0630\u060c \u0648\u0642\u062f \u062a\u062c\u062f \u0642\u0648\u0627\u0639\u062f \u062c\u0627\u0647\u0632\u0629 \u0644\u0644\u0645\u0646\u0627\u0641\u0630 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u0645\u062b\u0644 SSH \u0639\u0644\u0649 2026 \u0648\u0627\u0644\u0648\u064a\u0628 \u0639\u0644\u0649 80 \u0648443:<\/p>\n\n\n\n

\"\u0635\u0641\u062d\u0629
\u0644\u0642\u0637\u0629 \u062d\u0642\u064a\u0642\u064a\u0629: \u0642\u0648\u0627\u0639\u062f \u0627\u0644\u0633\u064a\u0631\u0641\u0631<\/figcaption><\/figure>\n\n\n\n

\u0641\u062a\u062d \u0645\u0646\u0641\u0630 \u062c\u062f\u064a\u062f \u062e\u0637\u0648\u0629 \u0628\u062e\u0637\u0648\u0629<\/h2>\n\n\n\n

\u0627\u0636\u063a\u0637 Create Firewall Rule<\/strong> \u0648\u0627\u0645\u0644\u0623 \u0627\u0644\u0646\u0627\u0641\u0630\u0629. \u0647\u0630\u0647 \u0645\u062b\u0644\u064b\u0627 \u0627\u0644\u0642\u0627\u0639\u062f\u0629 \u0627\u0644\u062d\u0642\u064a\u0642\u064a\u0629 \u0627\u0644\u062a\u064a \u062a\u0641\u062a\u062d \u0645\u0646\u0641\u0630 SSH \u0641\u064a \u0633\u064a\u0631\u0641\u0631\u0646\u0627 \u0627\u0644\u062a\u062c\u0631\u064a\u0628\u064a\u060c \u0648\u0639\u0644\u0649 \u0645\u0646\u0648\u0627\u0644\u0647\u0627 \u062a\u0641\u062a\u062d \u0623\u064a \u0645\u0646\u0641\u0630:<\/p>\n\n\n\n

\"\u0646\u0645\u0648\u0630\u062c
\u0644\u0642\u0637\u0629 \u062d\u0642\u064a\u0642\u064a\u0629: \u0642\u0627\u0639\u062f\u0629 \u0645\u0646\u0641\u0630 SSH<\/figcaption><\/figure>\n\n\n\n
\u0627\u0644\u062d\u0642\u0644<\/span>\u0645\u0627\u0630\u0627 \u062a\u062e\u062a\u0627\u0631<\/span><\/div>
Action<\/span>ACCEPT<\/strong> \u0644\u0644\u0633\u0645\u0627\u062d \u0628\u0627\u0644\u0627\u062a\u0635\u0627\u0644.<\/span><\/div>
Type<\/span>in<\/strong> \u0644\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0644\u0642\u0627\u062f\u0645\u0629 \u0625\u0644\u0649 \u0633\u064a\u0631\u0641\u0631\u0643 (\u0648\u0647\u0648 \u0627\u0644\u063a\u0627\u0644\u0628).<\/span><\/div>
Interface<\/span>\u0627\u062a\u0631\u0643\u0647 net0<\/code> (\u0643\u0631\u062a \u0627\u0644\u0634\u0628\u0643\u0629 \u0627\u0644\u0639\u0627\u0645).<\/span><\/div>
Source<\/span>\u0641\u0627\u0631\u063a = \u0645\u0646 \u0623\u064a \u0645\u0643\u0627\u0646. \u0623\u0648 \u0639\u0646\u0648\u0627\u0646 IP \u0645\u062d\u062f\u062f \u0644\u062a\u0642\u064a\u064a\u062f \u0627\u0644\u0648\u0635\u0648\u0644 (\u0645\u0647\u0645 \u0644\u0642\u0648\u0627\u0639\u062f \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0644\u0648\u062d\u0627\u062a \u0627\u0644\u0625\u062f\u0627\u0631\u0629).<\/span><\/div>
Macro<\/span>\u0642\u0648\u0627\u0644\u0628 \u062c\u0627\u0647\u0632\u0629 \u0644\u062e\u062f\u0645\u0627\u062a \u0645\u0639\u0631\u0648\u0641\u0629. \u0627\u062a\u0631\u0643\u0647 None \u0648\u0627\u0643\u062a\u0628 \u0627\u0644\u0645\u0646\u0641\u0630 \u0628\u0646\u0641\u0633\u0643 \u2014 \u0623\u0648\u0636\u062d.<\/span><\/div>
Protocol<\/span>TCP<\/strong> \u0644\u0623\u063a\u0644\u0628 \u0627\u0644\u062e\u062f\u0645\u0627\u062a\u060c \u0648UDP<\/strong> \u0644\u0640WireGuard \u0648OpenVPN \u0648RADIUS.<\/span><\/div>
Destination Port<\/span>\u0631\u0642\u0645 \u0627\u0644\u0645\u0646\u0641\u0630\u060c \u0623\u0648 \u0645\u062f\u0649 \u0645\u062b\u0644 1812:1813<\/code>.<\/span><\/div>
Enable + Comment<\/span>\u0641\u0639\u0651\u0644 \u0627\u0644\u0642\u0627\u0639\u062f\u0629\u060c \u0648\u0627\u0643\u062a\u0628 \u0627\u0633\u0645\u064b\u0627 \u064a\u0630\u0643\u0651\u0631\u0643 \u0628\u0633\u0628\u0628\u0647\u0627 \u0645\u062b\u0644 \u00abn8n\u00bb.<\/span><\/div><\/div>\n\n\n\n

\u062b\u0645 \u0627\u0633\u0645\u062d \u0628\u0627\u0644\u0645\u0646\u0641\u0630 \u0646\u0641\u0633\u0647 \u062f\u0627\u062e\u0644 \u0627\u0644\u0633\u064a\u0631\u0641\u0631 (\u0641\u064a Ubuntu \u0648Debian):<\/p>\n\n\n\n

sudo ufw allow 8080\/tcp comment 'my app'   # \u0645\u062b\u0627\u0644 \u0644\u0645\u0646\u0641\u0630 \u062a\u0637\u0628\u064a\u0642\nsudo ufw status                             # \u062a\u0623\u0643\u0651\u062f \u0645\u0646 \u0638\u0647\u0648\u0631 \u0627\u0644\u0642\u0627\u0639\u062f\u0629<\/code><\/pre>\n\n\n\n
\u0645\u0646\u0627\u0641\u0630 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0634\u0627\u0626\u0639\u0629<\/h2>\n\n\n\n
\u0627\u0644\u062a\u0637\u0628\u064a\u0642<\/span>\u0627\u0644\u0645\u0646\u0641\u0630<\/span>\u0627\u0644\u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644<\/span>\u0645\u0644\u0627\u062d\u0638\u0629<\/span><\/div>
SSH \u0641\u064a \u0633\u064a\u0631\u0641\u0631\u0627\u062a \u0645\u0631\u0627\u0645<\/span>2026<\/span>TCP<\/span>⚠️ \u0644\u0627 \u062a\u062d\u0630\u0641 \u0642\u0627\u0639\u062f\u062a\u0647<\/span><\/div>
\u0645\u0648\u0642\u0639 HTTP \/ HTTPS<\/span>80 \u0648443<\/span>TCP<\/span>\u0644\u0643\u0644 \u0645\u0648\u0627\u0642\u0639 \u0627\u0644\u0648\u064a\u0628<\/span><\/div>
WireGuard VPN<\/span>51820<\/span>UDP<\/span>\u2014<\/span><\/div>
OpenVPN<\/span>1194<\/span>UDP<\/span>\u2014<\/span><\/div>
MySQL \/ MariaDB<\/span>3306<\/span>TCP<\/span>\u0642\u064a\u0651\u062f\u0647 \u0628\u0639\u0646\u0648\u0627\u0646\u0643 \u0641\u064a Source<\/span><\/div>
PostgreSQL<\/span>5432<\/span>TCP<\/span>\u0642\u064a\u0651\u062f\u0647 \u0628\u0639\u0646\u0648\u0627\u0646\u0643 \u0641\u064a Source<\/span><\/div>
n8n<\/span>5678<\/span>TCP<\/span>\u0623\u0648 \u062e\u0644\u0641 Nginx \u0639\u0644\u0649 443<\/span><\/div>
Uptime Kuma<\/span>3001<\/span>TCP<\/span>\u0623\u0648 \u062e\u0644\u0641 Nginx \u0639\u0644\u0649 443<\/span><\/div>
Winbox (MikroTik)<\/span>8291<\/span>TCP<\/span>\u0642\u064a\u0651\u062f\u0647 \u0628\u0639\u0646\u0648\u0627\u0646\u0643<\/span><\/div>
RADIUS<\/span>1812:1813<\/span>UDP<\/span>\u0644\u0623\u0646\u0638\u0645\u0629 \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u0645\u0634\u062a\u0631\u0643\u064a\u0646<\/span><\/div><\/div>\n\n\n\n
\u0625\u063a\u0644\u0627\u0642 \u0645\u0646\u0641\u0630<\/h2>\n\n\n\n