---
title: Manage Firewall Rules
slug: bhdo/manage-firewall-rules
createdAt: 2023-07-24T15:44:25.732Z
---

You can manage firewall rules to open specific ports or port ranges for inbound communication by navigating to **System **> **Network **and clicking the **Firewall **tab. 

:::hint{type="info"}
**Notes**: 

- These firewall rules apply only to IPv4 traffic. 
- Only Admin users are able to add and edit firewall rules. See [Access Control](docId\:JC2m9q6_HRz6t9lasWYDb) to learn more. 
:::

The **Firewall **pane allows you to do the following:

- Review what ports are being used by Belden Horizon Data Operations system components, applications, and containers. 
- Ensure that any DeviceHub drivers and Docker container applications are not running on conflicting ports. 
- Open ports and port ranges with appropriate protocol (TCP/UDP) for Docker applications, containers, and DeviceHub drivers.
- Manage and close ports as needed. 

You can review any firewall changes in **System **> **Events**. 

The pane shows a summary of what ports are currently open. 

![](https://api.archbee.com/api/optimize/vAqK-046vdh4I0e1y9cfX/nBT15NvWLaXqlcrZti7K-_image.png)

# List of Reserved Ports

There are some ports that cannot be used for firewall rules because they are reserved for system services. 

Review the list of reserved ports. 

| **Reserved Port or Port Range** | **System Service that Uses Port(s)**            |
| ------------------------------- | ----------------------------------------------- |
| 21                              | FTP                                             |
| 22                              | SSH                                             |
| 80                              | HTTP                                            |
| 123                             | NTP                                             |
| 389                             | LDAP                                            |
| 443                             | Belden Horizon Data Manager API                 |
| 636                             | LDAP with SSL                                   |
| 1880                            | Belden Horizon Data Operations UI REST endpoint |
| 2121                            | FTP                                             |
| 4840                            | OPC UA                                          |
| 5353                            | mDNS                                            |
| 5355                            | LLMNR                                           |
| 8081-8199                       | REST API endpoints                              |
| 9081-9199                       | gRPC API endpoints                              |
| 8883                            | MQTT to Belden Horizon Data Manager             |
| 51280                           | Belden Horizon Data Manager Remote Access       |

# Add Firewall Rule

**To add a firewall rule:**

1. Navigate to **System **> **Network **and click the **Firewall **tab. 
2. Click **Add Rule**. 
   The *Add Inbound Rule* dialog displays. 

   ![](https://api.archbee.com/api/optimize/vAqK-046vdh4I0e1y9cfX/OaTG-C-jDPPFD6UF_NbHj_add-firewall-rule.png)
3. Configure the parameters for the firewall rule.
   1. **Port or Port Range**: Enter a single port number or a range of port numbers separated by a hyphen (-). 
   2. **Protocol**: Select either **TCP **(transmission control protocol) or **UDP **(user datagram protocol). 
   3. **Interface**: Select **eth0 **or **eth1**. 
   4. (**Optional) Service Name or Description**: Enter a name for the rule. 
4. Click **Add**. 
   The new rule displays on the pane. 

# Manage Port Rules

To manage port rules, click the **Action menu **for a rule. 

![](https://api.archbee.com/api/optimize/vAqK-046vdh4I0e1y9cfX/BCyQOqfbcko5jCY_khA1i_image.png)

- **Edit**: Update the rule. 
- **Delete**: Remove the rule and close the port or port range.