# Network Firewall

By default, we only open the ports necessary for the application you have deployed.

#### How can I restrict access to my service by IP address? From the Dashboard, select "***Security"***, then "***Show Settings"*** on the Firewall row [![Screenshot 2022-09-29 163646.png](https://docs.elest.io/uploads/images/gallery/2022-09/screenshot-2022-09-29-163646.png)](https://docs.elest.io/uploads/images/gallery/2022-01/image-1643092204220.png) From there you can modify, remove, or add new rules to open a port from your service to the internet (or just to a specific target IP).

All services come preconfigured with firewall rules that match the software you are deploying.

> You have to keep port 80 open to any ipv4/ipv6 or else Letsencrypt won't be able to generate an SSL certificate. ##### Here is a compilation of the ports necessary for Elestio Automation:
**Mandatory****Application****Protocol****Port** **Usage**
✔️Input TCP22Automation SSH
❌Input UDP4242Nebula/ Global IP
❌Input TCP18345VS Code
❌Input TCP18374Open Terminal
❌Input TCP18346File Explorer
❌InputTCP18445Tail Logs
❌Input TCP18344Terminal
❌ => Ports are necessary only if you are utilizing specific tools and activating global private IP functionality.