Do I need to check both the VPS firewall and the provider firewall?
Traffic can be filtered before it reaches the VPS and again inside the guest. An allow rule at one layer does not override a block at another. Check the assigned endpoint, actual listener and complete permitted path.
Instructions
1. Identify the expected access path
Confirm the IP, protocol, port and approved client source. In Britixo, review the selected service’s Networking and Security information and any supported restriction state. Only controls returned for that service should be assumed available.
2. Check the guest listener and firewall
Use an existing SSH session or the authorised console. On an Ubuntu guest using UFW, read its policy rather than disabling it.
sudo ss -lntp
sudo ufw status verbosess lists TCP listeners. The UFW command applies only where UFW is the active firewall manager; other distributions may use a different policy tool.
3. Test from the authorised client
Check the actual port and then authenticate normally.
Test-NetConnection 203.0.113.10 -Port 22If the listener exists but TCP fails, correlate guest and provider policies, route and source allowlist. Preserve console access while applying any approved correction.
Check the result
- The service listens on the intended address and port.
- Both applicable firewall layers permit exactly the intended access and a normal client connection succeeds.
Troubleshooting
- Adding a guest allow rule did not help
- The provider layer or network route may still block the connection.
- The panel offers a null-route control
- Read its effect carefully: it can make services using the selected IP unreachable; it is not an ordinary per-port allow rule.
Official references
Use the documentation for your installed version when a flag, service name or platform feature differs.