Firewall Groups

Create and manage firewall groups from the Firewall page in my.cubepath.com. A group is a reusable set of inbound/outbound rules you attach to one or more Virtual Machines or Dedicated Servers.

Create a group

### Open the create flow
On the **Firewall** page, click **New Group** and give it a name. Groups live at the project level, so any machine in the project can use one.

### Add rules
Each rule sets a **direction** (incoming/outgoing), **protocol** (TCP/UDP/ICMP/GRE), **port(s)** and a **source/destination** CIDR (empty = any).

### Save
By default a group ends with incoming **DROP** and outgoing **ACCEPT**, so add an inbound rule for each service you expose (e.g. TCP 22, 443).

Attach it

Open a machine's Firewall tab and toggle the group On, then Apply Changes — rules take effect live, with no reboot.

Note: A group still attached to a machine can't be deleted. Unassign it everywhere first.