[{"data":1,"prerenderedAt":538},["ShallowReactive",2],{"panduan-article-cara-setting-firewall-vps-ufw-firewalld-allow-port-dan-allow-service-untuk-ip-tertentu":3},{"article":4,"category":525},{"id":5,"title":6,"body":7,"created_at":513,"description":514,"extension":515,"featured":516,"meta":517,"navigation":518,"ogImage":519,"path":520,"robots":519,"schemaOrg":519,"seo":521,"sitemap":522,"stem":523,"updated_at":513,"__hash__":524},"knowledgeBase\u002Fpanduan\u002Fvps\u002Fcara-setting-firewall-vps-ufw-firewalld-allow-port-dan-allow-service-untuk-ip-tertentu.md","Cara Setting Firewall VPS: UFW, Firewalld, Allow Port, dan Allow Service untuk IP Tertentu",{"type":8,"value":9,"toc":506},"minimark",[10,14,19,22,30,46,53,57,64,239,243,249,401,405,408,458,462,502],[11,12,13],"p",{},"Panduan ini menjelaskan prosedur untuk mengonfigurasi firewall pada Virtual Private Server (VPS) melalui utilitas Uncomplicated Firewall (UFW) dan Firewalld. Pengaturan firewall yang tepat sangat bermanfaat untuk melindungi server dari akses tidak sah, menyaring lalu lintas jaringan masuk dan keluar, serta membatasi akses port atau layanan tertentu hanya untuk alamat IP yang terpercaya.",[15,16,18],"h2",{"id":17},"i-persiapan-awal-dan-akses-terminal-server","I. Persiapan Awal dan Akses Terminal Server",[11,20,21],{},"Sebelum melakukan konfigurasi firewall, Anda harus terhubung ke VPS menggunakan akses SSH dan menyiapkan direktori kerja pendukung.",[11,23,24,25,29],{},"Buka aplikasi terminal atau SSH client pada komputer Anda, lalu jalankan perintah berikut untuk masuk ke server sebagai akun root atau pengguna dengan hak akses ",[26,27,28],"code",{},"sudo",":",[31,32,37],"pre",{"className":33,"code":34,"language":35,"meta":36,"style":36},"language-plaintext shiki shiki-themes github-light github-dark","ssh username@alamat_ip_vps\n","plaintext","",[26,38,39],{"__ignoreMap":36},[40,41,44],"span",{"class":42,"line":43},"line",1,[40,45,34],{},[11,47,48,52],{},[49,50,51],"em",{},"Hasil yang diharapkan:"," Sesi terminal terhubung ke VPS dan menampilkan prompt baris perintah (command line).",[15,54,56],{"id":55},"ii-konfigurasi-firewall-menggunakan-ufw-ubuntu-debian","II. Konfigurasi Firewall Menggunakan UFW (Ubuntu \u002F Debian)",[11,58,59,63],{},[60,61,62],"strong",{},"UFW (Uncomplicated Firewall)"," adalah antarmuka manajemen firewall bawaan yang populer pada sistem operasi Ubuntu dan Debian karena kemudahan penggunaan perintahnya.",[65,66,67,99,125,154,191,208],"ol",{},[68,69,70,73,76,77,86,88,90,91,94,95,98],"li",{},[60,71,72],{},"Memeriksa Status UFW",[74,75],"br",{},"Periksa apakah UFW sudah aktif pada sistem Anda dengan menjalankan perintah:",[31,78,80],{"className":33,"code":79,"language":35,"meta":36,"style":36},"sudo ufw status verbose\n",[26,81,82],{"__ignoreMap":36},[40,83,84],{"class":42,"line":43},[40,85,79],{},[74,87],{},[49,89,51],{}," Terminal menampilkan status ",[26,92,93],{},"Status: inactive"," atau ",[26,96,97],{},"Status: active"," beserta daftar aturan yang sedang berjalan.",[68,100,101,104,106,107,116,118,120,121,124],{},[60,102,103],{},"Mengizinkan Akses SSH Terlebih Dahulu",[74,105],{},"Sebelum mengaktifkan UFW, pastikan Anda telah mengizinkan koneksi SSH agar sesi terminal Anda tidak terputus secara tidak terduga:",[31,108,110],{"className":33,"code":109,"language":35,"meta":36,"style":36},"sudo ufw allow 22\u002Ftcp\n",[26,111,112],{"__ignoreMap":36},[40,113,114],{"class":42,"line":43},[40,115,109],{},[74,117],{},[49,119,51],{}," Terminal menampilkan pesan ",[26,122,123],{},"Rules updated",".",[68,126,127,130,132,133,149,151,153],{},[60,128,129],{},"Mengizinkan Port dan Layanan Publik (Allow Port & Service)",[74,131],{},"Buka port untuk lalu lintas web standar HTTP (80) dan HTTPS (443), atau gunakan nama layanannya secara langsung:",[31,134,136],{"className":33,"code":135,"language":35,"meta":36,"style":36},"sudo ufw allow 80\u002Ftcp\nsudo ufw allow https\n",[26,137,138,143],{"__ignoreMap":36},[40,139,140],{"class":42,"line":43},[40,141,142],{},"sudo ufw allow 80\u002Ftcp\n",[40,144,146],{"class":42,"line":145},2,[40,147,148],{},"sudo ufw allow https\n",[74,150],{},[49,152,51],{}," Aturan baru ditambahkan untuk menerima lalu lintas lalu lintas masuk pada port 80 dan layanan HTTPS.",[68,155,156,159,161,162,165,166,169,170,173,174,183,185,187,188,190],{},[60,157,158],{},"Mengizinkan Akses Port Khusus untuk Alamat IP Tertentu",[74,160],{},"Untuk membatasi akses ke port sensitif (misalnya port basis data MySQL ",[26,163,164],{},"3306"," atau SSH ",[26,167,168],{},"22",") hanya dari alamat IP tertentu (contoh: ",[26,171,172],{},"192.168.1.50","), jalankan perintah:",[31,175,177],{"className":33,"code":176,"language":35,"meta":36,"style":36},"sudo ufw allow from 192.168.1.50 to any port 3306 proto tcp\n",[26,178,179],{"__ignoreMap":36},[40,180,181],{"class":42,"line":43},[40,182,176],{},[74,184],{},[49,186,51],{}," Hanya perangkat dengan alamat IP ",[26,189,172],{}," yang diizinkan terhubung ke port 3306\u002Ftcp.",[68,192,193,196,198,199],{},[60,194,195],{},"Mengizinkan Seluruh Akses Layanan dari Alamat IP Tertentu",[74,197],{},"Jika Anda ingin mengizinkan suatu IP tepercaya mengakses seluruh port dan layanan pada VPS Anda, gunakan perintah:",[31,200,202],{"className":33,"code":201,"language":35,"meta":36,"style":36},"sudo ufw allow from 192.168.1.50\n",[26,203,204],{"__ignoreMap":36},[40,205,206],{"class":42,"line":43},[40,207,201],{},[68,209,210,213,215,216,225,227,228,231,232,234,235,238],{},[60,211,212],{},"Mengaktifkan Firewall UFW",[74,214],{},"Jalankan perintah berikut untuk mengaktifkan seluruh aturan yang telah dibuat:",[31,217,219],{"className":33,"code":218,"language":35,"meta":36,"style":36},"sudo ufw enable\n",[26,220,221],{"__ignoreMap":36},[40,222,223],{"class":42,"line":43},[40,224,218],{},[74,226],{},"Ketik ",[26,229,230],{},"y"," saat muncul konfirmasi. ",[49,233,51],{}," Pesan ",[26,236,237],{},"Firewall is active and enabled on system startup"," akan muncul di layar.",[15,240,242],{"id":241},"iii-konfigurasi-firewall-menggunakan-firewalld-centos-almalinux-rhel","III. Konfigurasi Firewall Menggunakan Firewalld (CentOS \u002F AlmaLinux \u002F RHEL)",[11,244,245,248],{},[60,246,247],{},"Firewalld"," adalah alat manajemen firewall dinamis yang menjadi standar pada distribusi berbasis RHEL seperti CentOS, AlmaLinux, dan Rocky Linux.",[65,250,251,288,318,353,373],{},[68,252,253,256,258,259,280,282,284,285,124],{},[60,254,255],{},"Memeriksa Status dan Memulai Layanan Firewalld",[74,257],{},"Pastikan layanan Firewalld berjalan pada VPS Anda menggunakan perintah:",[31,260,262],{"className":33,"code":261,"language":35,"meta":36,"style":36},"sudo systemctl status firewalld\nsudo systemctl start firewalld\nsudo systemctl enable firewalld\n",[26,263,264,269,274],{"__ignoreMap":36},[40,265,266],{"class":42,"line":43},[40,267,268],{},"sudo systemctl status firewalld\n",[40,270,271],{"class":42,"line":145},[40,272,273],{},"sudo systemctl start firewalld\n",[40,275,277],{"class":42,"line":276},3,[40,278,279],{},"sudo systemctl enable firewalld\n",[74,281],{},[49,283,51],{}," Layanan Firewalld berstatus ",[26,286,287],{},"active (running)",[68,289,290,292,294,295,310,312,314,315,124],{},[60,291,129],{},[74,293],{},"Tambahkan layanan HTTP dan port kustom secara permanen ke dalam zona standar (public):",[31,296,298],{"className":33,"code":297,"language":35,"meta":36,"style":36},"sudo firewall-cmd --permanent --add-service=http\nsudo firewall-cmd --permanent --add-port=8080\u002Ftcp\n",[26,299,300,305],{"__ignoreMap":36},[40,301,302],{"class":42,"line":43},[40,303,304],{},"sudo firewall-cmd --permanent --add-service=http\n",[40,306,307],{"class":42,"line":145},[40,308,309],{},"sudo firewall-cmd --permanent --add-port=8080\u002Ftcp\n",[74,311],{},[49,313,51],{}," Terminal mengembalikan respons ",[26,316,317],{},"success",[68,319,320,323,325,326,329,330,332,333,336,337,346,348,314,350,352],{},[60,321,322],{},"Mengizinkan Akses Port atau Layanan untuk IP Tertentu (Rich Rules)",[74,324],{},"Gunakan fitur ",[60,327,328],{},"Rich Rules"," pada Firewalld untuk membuka port spesifik (misalnya port SSH ",[26,331,168],{},") khusus untuk alamat IP tertentu (contoh: ",[26,334,335],{},"203.0.113.25","):",[31,338,340],{"className":33,"code":339,"language":35,"meta":36,"style":36},"sudo firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"203.0.113.25\" port protocol=\"tcp\" port=\"22\" accept'\n",[26,341,342],{"__ignoreMap":36},[40,343,344],{"class":42,"line":43},[40,345,339],{},[74,347],{},[49,349,51],{},[26,351,317],{}," yang menandakan aturan khusus IP telah terdaftar.",[68,354,355,358,360,361,29,364],{},[60,356,357],{},"Mengizinkan Seluruh Akses dari IP Tertentu ke Zona Khusus (Trusted Zone)",[74,359],{},"Cara lain yang lebih praktis untuk memberikan akses penuh pada IP terpercaya adalah dengan memasukannya ke zona ",[60,362,363],{},"trusted",[31,365,367],{"className":33,"code":366,"language":35,"meta":36,"style":36},"sudo firewall-cmd --permanent --zone=trusted --add-source=203.0.113.25\n",[26,368,369],{"__ignoreMap":36},[40,370,371],{"class":42,"line":43},[40,372,366],{},[68,374,375,378,380,381,384,385,394,396,120,398,400],{},[60,376,377],{},"Menerapkan Ulang Konfigurasi (Reload Firewalld)",[74,379],{},"Setiap perubahan dengan opsi ",[26,382,383],{},"--permanent"," harus dimuat ulang agar aturan baru langsung aktif:",[31,386,388],{"className":33,"code":387,"language":35,"meta":36,"style":36},"sudo firewall-cmd --reload\n",[26,389,390],{"__ignoreMap":36},[40,391,392],{"class":42,"line":43},[40,393,387],{},[74,395],{},[49,397,51],{},[26,399,317],{}," dan aturan baru langsung diterapkan pada sistem.",[15,402,404],{"id":403},"iv-verifikasi-dan-pengujian-aturan-firewall","IV. Verifikasi dan Pengujian Aturan Firewall",[11,406,407],{},"Setelah aturan dikonfigurasi, lakukan pemeriksaan akhir untuk memastikan seluruh parameter telah diterapkan sesuai kebutuhan.",[65,409,410,432],{},[68,411,412,415,417,418,427,429,431],{},[60,413,414],{},"Memeriksa Daftar Aturan Aktif pada UFW",[74,416],{},"Jalankan perintah berikut jika Anda menggunakan UFW:",[31,419,421],{"className":33,"code":420,"language":35,"meta":36,"style":36},"sudo ufw status numbered\n",[26,422,423],{"__ignoreMap":36},[40,424,425],{"class":42,"line":43},[40,426,420],{},[74,428],{},[49,430,51],{}," Seluruh aturan ditampilkan beserta nomor urutnya untuk memudahkan pengelolaan atau penghapusan aturan di kemudian hari.",[68,433,434,437,439,440,449,451,453,454,457],{},[60,435,436],{},"Memeriksa Daftar Aturan Aktif pada Firewalld",[74,438],{},"Jalankan perintah berikut jika Anda menggunakan Firewalld:",[31,441,443],{"className":33,"code":442,"language":35,"meta":36,"style":36},"sudo firewall-cmd --list-all\n",[26,444,445],{"__ignoreMap":36},[40,446,447],{"class":42,"line":43},[40,448,442],{},[74,450],{},[49,452,51],{}," Antarmuka menampilkan daftar layanan (services), port, dan ",[60,455,456],{},"rich rules"," yang sedang aktif pada zona utama.",[15,459,461],{"id":460},"hal-penting-yang-perlu-diperhatikan","Hal Penting yang Perlu Diperhatikan",[463,464,465,474,480,486],"ul",{},[68,466,467,470,471,473],{},[60,468,469],{},"Peringatan Terkunci dari Server (SSH Lockout):"," Risiko terbesar saat mengonfigurasi firewall adalah terputus dari akses SSH. Selalu pastikan port SSH (port default ",[26,472,168],{}," atau port kustom Anda) telah diizinkan sebelum mengaktifkan UFW atau Firewalld.",[68,475,476,479],{},[60,477,478],{},"Jangan Mengaktifkan Dua Firewall Sekaligus:"," Hindari menjalankan UFW dan Firewalld secara bersamaan pada satu VPS karena dapat menyebabkan konflik aturan jaringan. Gunakan UFW untuk Ubuntu\u002FDebian dan Firewalld untuk CentOS\u002FRHEL\u002FAlmaLinux.",[68,481,482,485],{},[60,483,484],{},"Perubahan Alamat IP Dinamis (Common Mistake):"," Jika Anda mengonfigurasi pembatasan port khusus untuk IP tertentu (Allow IP), pastikan IP koneksi internet Anda bersifat statis. Jika IP publik Anda berubah (dinamis), Anda akan kehilangan akses ke port tersebut.",[68,487,488,491,492,495,496,94,499,124],{},[60,489,490],{},"Pembersihan Aturan Lama (Maintenance Tip):"," Hapus aturan port yang sudah tidak digunakan secara berkala untuk menjaga performa filter jaringan dan meminimalkan celah keamanan. Pada UFW gunakan ",[26,493,494],{},"sudo ufw delete [nomor_aturan]",", sedangkan pada Firewalld gunakan opsi ",[26,497,498],{},"--remove-port",[26,500,501],{},"--remove-service",[503,504,505],"style",{},"html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":36,"searchDepth":145,"depth":145,"links":507},[508,509,510,511,512],{"id":17,"depth":145,"text":18},{"id":55,"depth":145,"text":56},{"id":241,"depth":145,"text":242},{"id":403,"depth":145,"text":404},{"id":460,"depth":145,"text":461},"2026-09-10","Panduan ini menjelaskan prosedur untuk mengonfigurasi firewall pada Virtual Private Server (VPS) melalui utilitas Uncomplicated Firewall (UFW) dan Firewall...","md",false,{},true,null,"\u002Fpanduan\u002Fvps\u002Fcara-setting-firewall-vps-ufw-firewalld-allow-port-dan-allow-service-untuk-ip-tertentu",{"title":6,"description":514},{"loc":520},"panduan\u002Fvps\u002Fcara-setting-firewall-vps-ufw-firewalld-allow-port-dan-allow-service-untuk-ip-tertentu","NzFK37NmQ2mYIAPg_bQ49-kGu2wQyuYD5NVCRPYditc",{"id":526,"title":36,"body":527,"description":531,"extension":515,"meta":532,"name":533,"navigation":518,"path":534,"seo":535,"stem":536,"__hash__":537},"knowledgeBaseCategories\u002Fpanduan\u002Fvps\u002Findex.md",{"type":8,"value":528,"toc":529},[],{"title":36,"searchDepth":145,"depth":145,"links":530},[],"Pengelolaan akun _VPS_ secara umum.",{},"VPS","\u002Fpanduan\u002Fvps",{"description":531},"panduan\u002Fvps\u002Findex","OY43n-_eRXCpFgpOE94SqjGk4J7e1-IXWvMwMNin6Qs",1793089356277]