---
title: Giới thiệu tính năng Marco của Firewall đối với dịch vụ Cloud Server
description: Đối với các dịch vụ Cloud Server tại vHost, Firewall sẽ mặc định luôn bật để đảm bảo an toàn cho Khách hàng. Nếu Quý khách cần truy cập dịch vụ gì thì có thể tạo thêm rule để truy…
url: "https://vhost.vn/tai-lieu/cloud-server/gioi-thieu-tinh-nang-marco-cua-firewall-doi-voi-dich-vu-cloud-server/"
updated: "2024-12-05"
category: Cloud Server
---

# Giới thiệu tính năng Marco của Firewall đối với dịch vụ Cloud Server

Đối với các dịch vụ Cloud Server tại vHost, Firewall sẽ mặc định luôn bật để đảm bảo an toàn cho Khách hàng. Nếu Quý khách cần truy cập dịch vụ gì thì có thể tạo thêm rule để truy cập. Ở bài viết trước vHost đã hướng dẫn sử dụng tính năng quản lý firewall của dịch vụ Cloud Server. Quý khách có thể xem lại **[tại đây](https://vhost.vn/tai-lieu/cloud-server/huong-dan-su-dung-tinh-nang-quan-ly-firewall-cua-dich-vu-cloud-server/).**

Trong bài viết này vHost sẽ tập trung vào tính năng Marco của Firewall để giúp Quý khách tạo rule nhanh hơn với những Marco có sẵn.

[![](https://vhost.vn/wp-content/uploads/2024/11/Marco_vHost-1024x490.jpg)](https://vhost.vn/wp-content/uploads/2024/11/Marco_vHost.jpg)

Dưới đây là bảng liệt kê giới thiệu 1 số loại Marco phổ biến thường gặp:

***Amanda*** Amanda Backup

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 10080 |  |
| PARAM | tcp | 10080 |  |

***Auth***Auth (identd) traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 113 |  |

***BGP***Border Gateway Protocol traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 179 |  |

***BitTorrent***BitTorrent traffic for BitTorrent 3.1 and earlier

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 6881:6889 |  |
| PARAM | udp | 6881 |  |

***BitTorrent32***BitTorrent traffic for BitTorrent 3.2 and later

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 6881:6999 |  |
| PARAM | udp | 6881 |  |

***CVS***Concurrent Versions System pserver traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 2401 |  |

***Ceph***Ceph Storage Cluster traffic (Ceph Monitors, OSD & MDS Daemons)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 6789 |  |
| PARAM | tcp | 3300 |  |
| PARAM | tcp | 6800:7300 |  |

***Citrix*** Citrix/ICA traffic (ICA, ICA Browser, CGP)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 1494 |  |
| PARAM | udp | 1604 |  |
| PARAM | tcp | 2598 |  |

***DAAP*** Digital Audio Access Protocol traffic (iTunes, Rythmbox daemons)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 3689 |  |
| PARAM | udp | 3689 |  |

***DCC*** Distributed Checksum Clearinghouse spam filtering mechanism

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 6277 |  |

***DHCPfwd***Forwarded DHCP traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 67:68 | 67:68 |

***DHCPv6*** DHCPv6 traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 546:547 | 546:547 |

***DNS***Domain Name System traffic (upd and tcp)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 53 |  |
| PARAM | tcp | 53 |  |

***Distcc*** Distributed Compiler service

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 3632 |  |

***FTP***File Transfer Protocol

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 21 |  |

***Finger***Finger protocol (RFC 742)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 79 |  |

***GNUnet*** GNUnet secure peer-to-peer networking traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 2086 |  |
| PARAM | udp | 2086 |  |
| PARAM | tcp | 1080 |  |
| PARAM | udp | 1080 |  |

***GRE***Generic Routing Encapsulation tunneling protocol

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | 47 |  |  |

***Git*** Git distributed revision control traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 9418 |  |

***HKP***OpenPGP HTTP key server protocol traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 11371 |  |

***HTTP***Hypertext Transfer Protocol (WWW)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 80 |  |

***HTTPS*** Hypertext Transfer Protocol (WWW) over SSL

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 443 |  |

***ICPV2*** Internet Cache Protocol V2 (Squid) traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 3130 |  |

***ICQ*** AOL Instant Messenger traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 5190 |  |

***IMAP***Internet Message Access Protocol

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 143 |  |

***IMAPS***Internet Message Access Protocol over SSL

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 993 |  |

***IPIP***IPIP capsulation traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | 94 |  |  |

***IPsec*** IPsec traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 500 | 500 |
| PARAM | 50 |  |  |

***IPsecah*** IPsec authentication (AH) traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 500 | 500 |
| PARAM | 51 |  |  |

***IPsecnat*** IPsec traffic and Nat-Traversal

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 500 |  |
| PARAM | udp | 4500 |  |
| PARAM | 50 |  |  |

***IRC***Internet Relay Chat traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 6667 |  |

***Jetdirect*** HP Jetdirect printing

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 9100 |  |

***L2TP***Layer 2 Tunneling Protocol traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 1701 |  |

***LDAP*** Lightweight Directory Access Protocol traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 389 |  |

***LDAPS*** Secure Lightweight Directory Access Protocol traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 636 |  |

***MDNS*** Multicast DNS

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 5353 |  |

| ***MSNP*** Microsoft Notification Protocol |
| --- |

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 1863 |  |

***MSSQL***Microsoft SQL Server

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 1433 |  |

***Mail***Mail traffic (SMTP, SMTPS, Submission)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 25 |  |
| PARAM | tcp | 465 |  |
| PARAM | tcp | 587 |  |

***Munin***Munin networked resource monitoring traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 4949 |  |

***MySQL***MySQL server

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 3306 |  |

***NNTP***NNTP traffic (Usenet).

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 119 |  |

***NNTPS***Encrypted NNTP traffic (Usenet)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 563 |  |

***NTP***Network Time Protocol (ntpd)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 123 |  |

| ***NeighborDiscovery**IPv6 neighbor solicitation, neighbor and router advertisement* |
| --- |

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | icmpv6 | router-solicitation |  |
| PARAM | icmpv6 | router-advertisement |  |
| PARAM | icmpv6 | neighbor-solicitation |  |
| PARAM | icmpv6 | neighbor-advertisement |  |

***OSPF***OSPF multicast traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | 89 |  |  |

***OpenVPN*** OpenVPN traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 1194 |  |

***PCA***Symantec pcAnywhere (tm)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 5632 |  |
| PARAM | tcp | 5631 |  |

***PMG*** Proxmox Mail Gateway web interface

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 8006 |  |

***POP3***POP3 traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 110 |  |

***POP3S*** Encrypted POP3 traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 995 |  |

***PPtP*** Point-to-Point Tunneling Protocol

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | 47 |  |  |
| PARAM | tcp | 1723 |  |

***Ping***ICMP echo request

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | icmp | echo-request |  |

***PostgreSQL***PostgreSQL server

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 5432 |  |

***Printer***Line Printer protocol printing

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 515 |  |

***RDP***Microsoft Remote Desktop Protocol traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 3389 |  |

***RIP***Routing Information Protocol (bidirectional)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 520 |  |

***RNDC***BIND remote management protocol

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 953 |  |

***Razor*** Razor Antispam System

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 2703 |  |

***Rdate***Remote time retrieval (rdate)

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 37 |  |

***Rsync***Rsync server

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 873 |  |

***SANE***SANE network scanning

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | tcp | 6566 |  |

***SMB***Microsoft SMB traffic

| Action | proto | dport | sport |
| --- | --- | --- | --- |
| PARAM | udp | 135,445 |  |
| PARAM | udp | 137:139 |  |
| PARAM | udp | 1024:65535 | 137 |
| PARAM | tcp | 135,139,445 |  |

Bài viết trên vHost đã giới thiệu một số loại cấu hình Marco phổ biến thường gặp, đối với những port đặc biệt thì Quý khách nên cấu hình thủ công để đảm bảo được dịch vụ sẽ được truy cập tới đúng cách. Quý khách có thể xem cách cấu hình thủ công **[tại đây](https://vhost.vn/docs/cloud-server/huong-dan-su-dung-tinh-nang-quan-ly-firewall-cua-dich-vu-cloud-server/).**

Ngoài ra còn nhiều loại Macro khác, Quý khách có thể tham khảo thêm trong [**tài liệu chính thức**](https://pve.proxmox.com/pve-docs/pve-admin-guide.html#_firewall_macro_definitions) của Proxmox.

Nếu Quý khách có bất kỳ câu hỏi nào liên quan đến vấn đề kỹ thuật quý khách vui lòng liên hệ bộ phận kỹ thuật để được hỗ trợ qua các kênh sau:

- Ticket: [https://members.vhost.vn/tickets/new/](https://members.vhost.vn/tickets/new/)
- Email: support@vhost.vn
- Tổng đài: 19006806 – Nhấn phím 2 gặp bộ phận Kỹ Thuật