Open firewall ports (ufw)
Use ufw on your Victus Ubuntu VPS to open the ports your apps need — web, game and custom services — without locking yourself out of SSH.
On a Victus KVM VPS you get a full public IP with no upstream port blocking, so opening a port is done inside the machine with a firewall. Ubuntu ships ufw (Uncomplicated Firewall), a friendly front-end to iptables. This article shows the safe order of operations so you never lock yourself out.
Allow SSH before you enable ufw
If you enable ufw with a default-deny policy and have NOT allowed port 22, your current SSH session survives but new connections are blocked — and you are locked out on the next disconnect. Always run "ufw allow OpenSSH" first.
Set up ufw safely
Open the ports your service needs
Check and remove rules
| Port | Protocol | Typical use |
|---|---|---|
| 22 | TCP | SSH (keep open!) |
| 80 / 443 | TCP | HTTP / HTTPS websites |
| 25565 | TCP | Minecraft server |
| 3306 / 5432 | TCP | MySQL / PostgreSQL (restrict by IP!) |
Do not expose databases to the world
Never run a bare "ufw allow 3306/tcp". Restrict database and admin ports to specific source IPs, or keep them bound to localhost and reach them over an SSH tunnel.