{"id":33904,"date":"2025-10-02T10:52:06","date_gmt":"2025-10-02T03:52:06","guid":{"rendered":"https:\/\/interdata.vn\/blog\/?p=33904"},"modified":"2026-03-13T14:09:12","modified_gmt":"2026-03-13T07:09:12","slug":"huong-dan-tat-mo-port-tren-vps","status":"publish","type":"post","link":"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/","title":{"rendered":"C\u00e1ch T\u1eaft\/M\u1edf Port Tr\u00ean VPS (Linux, Windows) B\u1eb1ng L\u1ec7nh [2026]"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-white ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">N\u1ed8I DUNG<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Bang-tra-cuu-nhanh-cac-Port-VPS-pho-bien-can-mo\" >B\u1ea3ng tra c\u1ee9u nhanh c\u00e1c Port VPS ph\u1ed5 bi\u1ebfn c\u1ea7n m\u1edf<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Huong-dan-mo-va-tat-port-tren-VPS-Linux-Theo-tung-Firewall\" >H\u01b0\u1edbng d\u1eabn m\u1edf v\u00e0 t\u1eaft port tr\u00ean VPS Linux (Theo t\u1eebng Firewall)<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Lenh-thao-tac-voi-UFW-Danh-cho-Ubuntu-Debian\" >L\u1ec7nh thao t\u00e1c v\u1edbi UFW (D\u00e0nh cho Ubuntu, Debian)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Lenh-thao-tac-voi-FirewallD-Danh-cho-CentOS-7-RHEL-AlmaLinux\" >L\u1ec7nh thao t\u00e1c v\u1edbi FirewallD (D\u00e0nh cho CentOS 7+, RHEL, AlmaLinux)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Lenh-thao-tac-voi-IPTables-Dong-lenh-truyen-thong\" >L\u1ec7nh thao t\u00e1c v\u1edbi IPTables (D\u00f2ng l\u1ec7nh truy\u1ec1n th\u1ed1ng)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Cach-mo-va-tat-port-tren-VPS-Windows-Server-qua-giao-dien-do-hoa\" >C\u00e1ch m\u1edf v\u00e0 t\u1eaft port tr\u00ean VPS Windows Server qua giao di\u1ec7n \u0111\u1ed3 h\u1ecda<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Tai-sao-da-mo-port-VPS-thanh-cong-nhung-van-khong-ket-noi-duoc\" >T\u1ea1i sao \u0111\u00e3 m\u1edf port VPS th\u00e0nh c\u00f4ng nh\u01b0ng v\u1eabn kh\u00f4ng k\u1ebft n\u1ed1i \u0111\u01b0\u1ee3c?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Thue-VPS-Gia-Re-%E2%80%94-Toan-Quyen-Quan-Tri-Ho-Tro-Linux-Windows\" >Thu\u00ea VPS Gi\u00e1 R\u1ebb \u2014 To\u00e0n Quy\u1ec1n Qu\u1ea3n Tr\u1ecb, H\u1ed7 Tr\u1ee3 Linux &amp; Windows<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#FAQs-%E2%80%94-Cac-cau-hoi-thuong-gap-khi-quan-ly-Port-VPS\" >FAQs \u2014 C\u00e1c c\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p khi qu\u1ea3n l\u00fd Port VPS<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Lam-sao-de-kiem-tra-port-VPS-da-thong-chua\" >L\u00e0m sao \u0111\u1ec3 ki\u1ec3m tra port VPS \u0111\u00e3 th\u00f4ng ch\u01b0a?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Co-nen-thay-doi-port-mac-dinh-SSH-22-va-RDP-3389-khong\" >C\u00f3 n\u00ean thay \u0111\u1ed5i port m\u1eb7c \u0111\u1ecbnh SSH (22) v\u00e0 RDP (3389) kh\u00f4ng?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Mo-nhieu-port-co-lam-VPS-cham-hon-khong\" >M\u1edf nhi\u1ec1u port c\u00f3 l\u00e0m VPS ch\u1eadm h\u01a1n kh\u00f4ng?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Toi-dang-dung-aaPanel-CyberPanel-DirectAdmin-thi-mo-port-bang-lenh-hay-giao-dien\" >T\u00f4i \u0111ang d\u00f9ng aaPanel \/ CyberPanel \/ DirectAdmin th\u00ec m\u1edf port b\u1eb1ng l\u1ec7nh hay giao di\u1ec7n?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/interdata.vn\/blog\/huong-dan-tat-mo-port-tren-vps\/#Ket-luan\" >K\u1ebft lu\u1eadn<\/a><\/li><\/ul><\/nav><\/div>\n<p><!-- OVERVIEW BLOCK \/ DIRECT ANSWER (tr\u01b0\u1edbc H1, kh\u00f4ng heading) --><\/p>\n<div class=\"summary\">\n<p><strong>T\u00f3m t\u1eaft nhanh:<\/strong> M\u1edf port tr\u00ean VPS l\u00e0 thao t\u00e1c c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda (Firewall) \u0111\u1ec3 cho ph\u00e9p lu\u1ed3ng d\u1eef li\u1ec7u \u0111i v\u00e0o (Inbound) ho\u1eb7c \u0111i ra (Outbound) qua m\u1ed9t c\u1ed5ng giao ti\u1ebfp c\u1ee5 th\u1ec3 \u2014 v\u00ed d\u1ee5 port 80 cho Web, port 22 cho SSH. C\u00f4ng c\u1ee5 d\u00f9ng s\u1ebd kh\u00e1c nhau t\u00f9y h\u1ec7 \u0111i\u1ec1u h\u00e0nh: Linux d\u00f9ng UFW, FirewallD ho\u1eb7c IPTables; Windows d\u00f9ng Defender Firewall. Sau khi m\u1edf port tr\u00ean OS, n\u1ebfu VPS ch\u1ea1y tr\u00ean n\u1ec1n Cloud (AWS, Azure, GCP), b\u1ea1n b\u1eaft bu\u1ed9c ph\u1ea3i m\u1edf th\u00eam \u1edf l\u1edbp Security Group b\u00ean ngo\u00e0i.<\/p>\n<ul>\n<li>X\u00e1c \u0111\u1ecbnh \u0111\u00fang h\u1ec7 \u0111i\u1ec1u h\u00e0nh \u0111\u1ec3 ch\u1ecdn \u0111\u00fang c\u00f4ng c\u1ee5 Firewall (UFW, FirewallD, hay IPTables).<\/li>\n<li>D\u00f9ng l\u1ec7nh <code>allow<\/code> \u0111\u1ec3 m\u1edf, <code>delete\/remove<\/code> \u0111\u1ec3 t\u1eaft \u2014 c\u00fa ph\u00e1p kh\u00e1c nhau t\u00f9y tool.<\/li>\n<li>N\u1ebfu VPS ch\u1ea1y tr\u00ean Cloud (AWS, Azure, GCP), b\u1eaft bu\u1ed9c m\u1edf th\u00eam port t\u1ea1i Security Group c\u1ee7a nh\u00e0 cung c\u1ea5p.<\/li>\n<li>Sau khi m\u1edf xong, d\u00f9ng <code>netstat<\/code> ho\u1eb7c tool online \u0111\u1ec3 x\u00e1c minh port th\u1ef1c s\u1ef1 th\u00f4ng.<\/li>\n<\/ul>\n<\/div>\n<p><!-- INTRODUCTION HOOK (kh\u00f4ng heading) --><\/p>\n<p>B\u1ea1n v\u1eeba c\u00e0i xong web server, database, ho\u1eb7c game server tr\u00ean <a href=\"https:\/\/interdata.vn\/blog\/vps-la-gi\/\">VPS<\/a> \u2014 nh\u01b0ng truy c\u1eadp t\u1eeb b\u00ean ngo\u00e0i th\u00ec b\u00e1o <em>Connection Refused<\/em> ho\u1eb7c request c\u1ee9 <em>Time out<\/em> m\u00e3i kh\u00f4ng ph\u1ea3n h\u1ed3i. Kh\u1edfi \u0111\u1ed9ng l\u1ea1i d\u1ecbch v\u1ee5 kh\u00f4ng \u0103n thua. Ping \u0111\u1ebfn IP th\u00ec v\u1eabn th\u00f4ng. V\u1ea5n \u0111\u1ec1 n\u1eb1m \u1edf ch\u1ed7 kh\u00e1c: t\u01b0\u1eddng l\u1eeda \u0111ang ch\u1eb7n port giao ti\u1ebfp c\u1ee7a \u1ee9ng d\u1ee5ng \u0111\u00f3.<\/p>\n<p>B\u00e0i vi\u1ebft n\u00e0y cung c\u1ea5p ch\u00ednh x\u00e1c c\u00e1c l\u1ec7nh v\u00e0 thao t\u00e1c c\u1ea7n thi\u1ebft \u0111\u1ec3 m\u1edf ho\u1eb7c t\u1eaft port tr\u00ean m\u1ecdi h\u1ec7 \u0111i\u1ec1u h\u00e0nh VPS ph\u1ed5 bi\u1ebfn \u2014 Ubuntu, CentOS, v\u00e0 Windows Server. Kh\u00f4ng gi\u1ea3i th\u00edch l\u1ea1i VPS l\u00e0 g\u00ec, kh\u00f4ng l\u00fd thuy\u1ebft d\u00e0i d\u00f2ng. M\u1ed7i l\u1ec7nh \u0111\u1ec1u c\u00f3 ch\u00fa th\u00edch r\u00f5 \u00fd ngh\u0129a \u0111\u1ec3 b\u1ea1n hi\u1ec3u m\u00ecnh \u0111ang l\u00e0m g\u00ec, kh\u00f4ng ch\u1ec9 copy-paste m\u00f9 qu\u00e1ng.<\/p>\n<p><!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Bang-tra-cuu-nhanh-cac-Port-VPS-pho-bien-can-mo\"><\/span>B\u1ea3ng tra c\u1ee9u nhanh c\u00e1c Port VPS ph\u1ed5 bi\u1ebfn c\u1ea7n m\u1edf<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Tr\u01b0\u1edbc khi g\u00f5 l\u1ec7nh, x\u00e1c \u0111\u1ecbnh \u0111\u00fang s\u1ed1 port v\u00e0 giao th\u1ee9c c\u1ee7a d\u1ecbch v\u1ee5 m\u00ecnh c\u1ea7n m\u1edf. B\u1ea3ng d\u01b0\u1edbi \u0111\u00e2y t\u1ed5ng h\u1ee3p c\u00e1c port th\u01b0\u1eddng d\u00f9ng nh\u1ea5t theo chu\u1ea9n IANA \u2014 c\u01a1 quan qu\u1ed1c t\u1ebf qu\u1ea3n l\u00fd vi\u1ec7c ph\u00e2n b\u1ed5 s\u1ed1 port tr\u00ean to\u00e0n c\u1ea7u.<\/p>\n<table>\n<thead>\n<tr>\n<th>D\u1ecbch v\u1ee5<\/th>\n<th>S\u1ed1 Port<\/th>\n<th>Giao th\u1ee9c<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>HTTP (Web)<\/td>\n<td>80<\/td>\n<td>TCP<\/td>\n<\/tr>\n<tr>\n<td>HTTPS (Web b\u1ea3o m\u1eadt)<\/td>\n<td>443<\/td>\n<td>TCP<\/td>\n<\/tr>\n<tr>\n<td>SSH (Qu\u1ea3n tr\u1ecb Linux)<\/td>\n<td>22<\/td>\n<td>TCP<\/td>\n<\/tr>\n<tr>\n<td>RDP (Remote Desktop Windows)<\/td>\n<td>3389<\/td>\n<td>TCP<\/td>\n<\/tr>\n<tr>\n<td>FTP (Truy\u1ec1n file)<\/td>\n<td>21<\/td>\n<td>TCP<\/td>\n<\/tr>\n<tr>\n<td>MySQL \/ MariaDB<\/td>\n<td>3306<\/td>\n<td>TCP<\/td>\n<\/tr>\n<tr>\n<td>PostgreSQL<\/td>\n<td>5432<\/td>\n<td>TCP<\/td>\n<\/tr>\n<tr>\n<td>DNS<\/td>\n<td>53<\/td>\n<td>TCP\/UDP<\/td>\n<\/tr>\n<tr>\n<td>SMTP (Email g\u1eedi \u0111i)<\/td>\n<td>25 \/ 587<\/td>\n<td>TCP<\/td>\n<\/tr>\n<tr>\n<td>Game Server (Steam \/ Source)<\/td>\n<td>27015<\/td>\n<td>TCP\/UDP<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div class=\"note-box\"><strong>L\u01b0u \u00fd:<\/strong> database port nh\u01b0 3306 (MySQL) kh\u00f4ng n\u00ean m\u1edf ra public internet tr\u1eeb khi b\u1ea1n bi\u1ebft m\u00ecnh \u0111ang l\u00e0m g\u00ec. Ch\u1ec9 m\u1edf v\u1edbi IP c\u1ee5 th\u1ec3 ho\u1eb7c \u0111\u1ec3 k\u1ebft n\u1ed1i n\u1ed9i b\u1ed9 trong c\u00f9ng m\u1ea1ng VPS.<\/div>\n<p><!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Huong-dan-mo-va-tat-port-tren-VPS-Linux-Theo-tung-Firewall\"><\/span>H\u01b0\u1edbng d\u1eabn m\u1edf v\u00e0 t\u1eaft port tr\u00ean VPS Linux (Theo t\u1eebng Firewall)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Linux kh\u00f4ng c\u00f3 m\u1ed9t l\u1ec7nh duy nh\u1ea5t \u0111\u1ec3 m\u1edf port \u00e1p d\u1ee5ng cho t\u1ea5t c\u1ea3 distro. Ubuntu v\u00e0 Debian m\u1eb7c \u0111\u1ecbnh d\u00f9ng <strong>UFW<\/strong> (Uncomplicated Firewall) \u2014 m\u1ed9t l\u1edbp b\u1ecdc th\u00e2n thi\u1ec7n h\u01a1n b\u00ean tr\u00ean IPTables. CentOS 7 tr\u1edf l\u00ean v\u00e0 RHEL d\u00f9ng <strong>FirewallD<\/strong>. C\u00e1c b\u1ea3n Linux c\u0169 ho\u1eb7c m\u00f4i tr\u01b0\u1eddng minimal image \u0111\u00f4i khi ch\u1ec9 c\u00f3 <strong>IPTables<\/strong> thu\u1ea7n. X\u00e1c \u0111\u1ecbnh \u0111\u00fang tool \u0111ang ch\u1ea1y tr\u01b0\u1edbc khi g\u00f5 l\u1ec7nh \u2014 n\u1ebfu kh\u00f4ng, l\u1ec7nh s\u1ebd b\u00e1o command not found ho\u1eb7c t\u1ec7 h\u01a1n l\u00e0 kh\u00f4ng c\u00f3 t\u00e1c d\u1ee5ng g\u00ec nh\u01b0ng kh\u00f4ng b\u00e1o l\u1ed7i.<\/p>\n<p>\u0110\u1ec3 ki\u1ec3m tra tool n\u00e0o \u0111ang active tr\u00ean VPS c\u1ee7a b\u1ea1n: ch\u1ea1y <code>ufw status<\/code> \u2014 n\u1ebfu tr\u1ea3 v\u1ec1 k\u1ebft qu\u1ea3, \u0111\u00f3 l\u00e0 UFW; ch\u1ea1y <code>firewall-cmd --state<\/code> \u2014 n\u1ebfu tr\u1ea3 v\u1ec1 <code>running<\/code>, \u0111\u00f3 l\u00e0 FirewallD.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Lenh-thao-tac-voi-UFW-Danh-cho-Ubuntu-Debian\"><\/span>L\u1ec7nh thao t\u00e1c v\u1edbi UFW (D\u00e0nh cho Ubuntu, Debian)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t m\u1eb7c \u0111\u1ecbnh tr\u00ean Ubuntu 18.04 tr\u1edf l\u00ean. C\u00fa ph\u00e1p \u0111\u01a1n gi\u1ea3n, d\u1ec5 \u0111\u1ecdc, v\u00e0 ph\u00f9 h\u1ee3p cho c\u1ea3 ng\u01b0\u1eddi m\u1edbi l\u1eabn sysadmin c\u00f3 kinh nghi\u1ec7m.<\/p>\n<p><strong>M\u1edf m\u1ed9t port c\u1ee5 th\u1ec3:<\/strong><\/p>\n<pre><code>sudo ufw allow 80\/tcp<\/code><\/pre>\n<p>L\u1ec7nh tr\u00ean m\u1edf port 80 theo giao th\u1ee9c TCP \u2014 ph\u00f9 h\u1ee3p cho web server HTTP. Thay <strong>80<\/strong> b\u1eb1ng s\u1ed1 port b\u1ea1n c\u1ea7n, thay <strong>tcp<\/strong> b\u1eb1ng <strong>udp<\/strong> n\u1ebfu d\u1ecbch v\u1ee5 d\u00f9ng UDP (v\u00ed d\u1ee5: game server, <a href=\"https:\/\/interdata.vn\/blog\/dns-la-gi\/\">DNS<\/a>).<\/p>\n<p><strong>M\u1edf port m\u00e0 kh\u00f4ng ch\u1ec9 \u0111\u1ecbnh giao th\u1ee9c<\/strong> (m\u1edf c\u1ea3 TCP l\u1eabn UDP):<\/p>\n<pre><code>sudo ufw allow 27015<\/code><\/pre>\n<p><strong>T\u1eaft (x\u00f3a) m\u1ed9t rule \u0111\u00e3 m\u1edf:<\/strong><\/p>\n<pre><code>sudo ufw delete allow 80\/tcp<\/code><\/pre>\n<p><strong>Ki\u1ec3m tra tr\u1ea1ng th\u00e1i t\u01b0\u1eddng l\u1eeda v\u00e0 c\u00e1c rule \u0111ang active:<\/strong><\/p>\n<pre><code>sudo ufw status verbose<\/code><\/pre>\n<p>Sau khi th\u00eam rule, UFW \u00e1p d\u1ee5ng ngay l\u1eadp t\u1ee9c \u2014 kh\u00f4ng c\u1ea7n reload. \u0110\u00e2y l\u00e0 \u0111i\u1ec3m kh\u00e1c bi\u1ec7t so v\u1edbi FirewallD \u1edf ph\u1ea7n ti\u1ebfp theo.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Lenh-thao-tac-voi-FirewallD-Danh-cho-CentOS-7-RHEL-AlmaLinux\"><\/span>L\u1ec7nh thao t\u00e1c v\u1edbi FirewallD (D\u00e0nh cho CentOS 7+, RHEL, AlmaLinux)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>FirewallD ho\u1ea1t \u0111\u1ed9ng theo c\u01a1 ch\u1ebf zone \u2014 m\u1ed7i interface m\u1ea1ng thu\u1ed9c v\u1ec1 m\u1ed9t zone, v\u00e0 rule \u0111\u01b0\u1ee3c g\u1eafn v\u00e0o zone \u0111\u00f3. \u0110i\u1ec1u n\u00e0y linh ho\u1ea1t h\u01a1n UFW, nh\u01b0ng c\u0169ng c\u00f3 th\u00eam m\u1ed9t b\u01b0\u1edbc m\u00e0 ng\u01b0\u1eddi m\u1edbi hay qu\u00ean: sau khi th\u00eam rule, ph\u1ea3i <code>reload<\/code> \u0111\u1ec3 \u00e1p d\u1ee5ng v\u00e0o runtime.<\/p>\n<p><strong>M\u1edf port v\u0129nh vi\u1ec5n (sau reboot v\u1eabn gi\u1eef):<\/strong><\/p>\n<pre><code>sudo firewall-cmd --permanent --add-port=80\/tcp\r\nsudo firewall-cmd --reload<\/code><\/pre>\n<p>C\u1edd <strong>&#8211;permanent<\/strong> ghi rule v\u00e0o file c\u1ea5u h\u00ecnh \u0111\u0129a. N\u1ebfu b\u1ecf c\u1edd n\u00e0y, rule ch\u1ec9 t\u1ed3n t\u1ea1i trong session hi\u1ec7n t\u1ea1i v\u00e0 bi\u1ebfn m\u1ea5t khi kh\u1edfi \u0111\u1ed9ng l\u1ea1i VPS \u2014 l\u1ed7i ph\u1ed5 bi\u1ebfn nh\u1ea5t v\u1edbi FirewallD.<\/p>\n<p><strong>T\u1eaft m\u1ed9t port:<\/strong><\/p>\n<pre><code>sudo firewall-cmd --permanent --remove-port=80\/tcp\r\nsudo firewall-cmd --reload<\/code><\/pre>\n<p><strong>Ki\u1ec3m tra danh s\u00e1ch port \u0111ang m\u1edf trong zone hi\u1ec7n t\u1ea1i:<\/strong><\/p>\n<pre><code>sudo firewall-cmd --list-ports<\/code><\/pre>\n<h3><span class=\"ez-toc-section\" id=\"Lenh-thao-tac-voi-IPTables-Dong-lenh-truyen-thong\"><\/span>L\u1ec7nh thao t\u00e1c v\u1edbi IPTables (D\u00f2ng l\u1ec7nh truy\u1ec1n th\u1ed1ng)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>IPTables l\u00e0 c\u00f4ng c\u1ee5 g\u1ed1c, t\u1ed3n t\u1ea1i tr\u00ean h\u1ea7u h\u1ebft m\u1ecdi distro Linux \u2014 UFW v\u00e0 FirewallD th\u1ef1c ch\u1ea5t \u0111\u1ec1u d\u00f9ng IPTables b\u00ean d\u01b0\u1edbi. Tuy nhi\u00ean, c\u00fa ph\u00e1p ph\u1ee9c t\u1ea1p h\u01a1n v\u00e0 c\u00f3 m\u1ed9t r\u1ee7i ro nghi\u00eam tr\u1ecdng c\u1ea7n bi\u1ebft.<\/p>\n<p><strong>M\u1edf port b\u1eb1ng IPTables:<\/strong><\/p>\n<pre><code>sudo iptables -A INPUT -p tcp --dport 80 -j ACCEPT<\/code><\/pre>\n<div class=\"warning-box\">\n<p>\u26a0\ufe0f <strong>C\u1ea3nh b\u00e1o quan tr\u1ecdng:<\/strong> Rule IPTables s\u1ebd m\u1ea5t ho\u00e0n to\u00e0n sau khi reboot VPS n\u1ebfu b\u1ea1n kh\u00f4ng c\u00e0i th\u00eam g\u00f3i <code>iptables-persistent<\/code> (Debian\/Ubuntu) ho\u1eb7c <code>iptables-services<\/code> (CentOS\/RHEL) \u0111\u1ec3 l\u01b0u l\u1ea1i c\u1ea5u h\u00ecnh. N\u1ebfu b\u1ea1n kh\u00f4ng quen v\u1edbi IPTables, h\u00e3y d\u00f9ng UFW ho\u1eb7c FirewallD thay th\u1ebf \u2014 hai c\u00f4ng c\u1ee5 \u0111\u00f3 t\u1ef1 x\u1eed l\u00fd vi\u1ec7c l\u01b0u rule t\u1ef1 \u0111\u1ed9ng.<\/p>\n<\/div>\n<p><!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cach-mo-va-tat-port-tren-VPS-Windows-Server-qua-giao-dien-do-hoa\"><\/span>C\u00e1ch m\u1edf v\u00e0 t\u1eaft port tr\u00ean VPS Windows Server qua giao di\u1ec7n \u0111\u1ed3 h\u1ecda<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Windows Server qu\u1ea3n l\u00fd port th\u00f4ng qua <strong>Windows Defender Firewall with Advanced Security<\/strong> \u2014 m\u1ed9t giao di\u1ec7n GUI \u0111\u1ea7y \u0111\u1ee7 ch\u1ee9c n\u0103ng, kh\u00f4ng c\u1ea7n g\u00f5 l\u1ec7nh. Thao t\u00e1c g\u1ed3m 6 b\u01b0\u1edbc, \u00e1p d\u1ee5ng cho Windows Server 2016, 2019, v\u00e0 2022.<\/p>\n<ol>\n<li><strong>M\u1edf Windows Defender Firewall with Advanced Security.<\/strong> T\u00ecm ki\u1ebfm t\u00ean \u0111\u00f3 trong Start Menu, ho\u1eb7c ch\u1ea1y l\u1ec7nh <code>wf.msc<\/code> trong h\u1ed9p tho\u1ea1i Run (Win + R).<\/li>\n<li><strong>Ch\u1ecdn &#8220;Inbound Rules&#8221;<\/strong> \u1edf panel b\u00ean tr\u00e1i, sau \u0111\u00f3 click <strong>&#8220;New Rule\u2026&#8221;<\/strong> \u1edf panel b\u00ean ph\u1ea3i.<\/li>\n<li><strong>Ch\u1ecdn lo\u1ea1i rule l\u00e0 &#8220;Port&#8221;<\/strong> \u2192 Next. \u0110\u00e2y l\u00e0 tr\u01b0\u1eddng h\u1ee3p ph\u1ed5 bi\u1ebfn nh\u1ea5t \u2014 b\u1ea1n mu\u1ed1n m\u1edf m\u1ed9t c\u1ed5ng c\u1ee5 th\u1ec3, kh\u00f4ng ph\u1ea3i theo t\u00ean ch\u01b0\u01a1ng tr\u00ecnh hay d\u1ecbch v\u1ee5.<\/li>\n<li><strong>Ch\u1ecdn giao th\u1ee9c TCP ho\u1eb7c UDP<\/strong>, sau \u0111\u00f3 nh\u1eadp s\u1ed1 port c\u1ea7n m\u1edf v\u00e0o \u00f4 <em>Specific local ports<\/em> (v\u00ed d\u1ee5: <strong>3306<\/strong> cho MySQL, <strong>443<\/strong> cho HTTPS). C\u00f3 th\u1ec3 nh\u1eadp nhi\u1ec1u port c\u00e1ch nhau b\u1eb1ng d\u1ea5u ph\u1ea9y, ho\u1eb7c m\u1ed9t d\u1ea3i port b\u1eb1ng d\u1ea5u g\u1ea1ch ngang (VD: <code>8080-8090<\/code>).<\/li>\n<li><strong>Ch\u1ecdn &#8220;Allow the connection&#8221;<\/strong> \u2192 Next. Tick c\u1ea3 3 \u00f4 (Domain, Private, Public) t\u00f9y m\u00f4i tr\u01b0\u1eddng \u2014 n\u1ebfu kh\u00f4ng ch\u1eafc, tick c\u1ea3 3.<\/li>\n<li><strong>\u0110\u1eb7t t\u00ean cho rule<\/strong> \u2014 n\u00ean \u0111\u1eb7t t\u00ean r\u00f5 r\u00e0ng nh\u01b0 <em>MySQL 3306 Inbound<\/em> \u0111\u1ec3 d\u1ec5 qu\u1ea3n l\u00fd sau n\u00e0y \u2192 Finish.<\/li>\n<\/ol>\n<p>Rule c\u00f3 hi\u1ec7u l\u1ef1c ngay l\u1eadp t\u1ee9c, kh\u00f4ng c\u1ea7n kh\u1edfi \u0111\u1ed9ng l\u1ea1i. \u0110\u1ec3 t\u1eaft rule, v\u00e0o l\u1ea1i Inbound Rules, t\u00ecm rule v\u1eeba t\u1ea1o, chu\u1ed9t ph\u1ea3i \u2192 <strong>Disable Rule<\/strong> ho\u1eb7c <strong>Delete<\/strong>.<\/p>\n<p><!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Tai-sao-da-mo-port-VPS-thanh-cong-nhung-van-khong-ket-noi-duoc\"><\/span>T\u1ea1i sao \u0111\u00e3 m\u1edf port VPS th\u00e0nh c\u00f4ng nh\u01b0ng v\u1eabn kh\u00f4ng k\u1ebft n\u1ed1i \u0111\u01b0\u1ee3c?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><strong>Nguy\u00ean nh\u00e2n ch\u00ednh l\u00e0 do b\u1ea1n ch\u01b0a m\u1edf port \u1edf l\u1edbp t\u01b0\u1eddng l\u1eeda ngo\u1ea1i vi (Security Group) c\u1ee7a nh\u00e0 cung c\u1ea5p Cloud, ho\u1eb7c \u1ee9ng d\u1ee5ng b\u00ean trong VPS ch\u01b0a \u0111\u01b0\u1ee3c b\u1eadt \u0111\u1ec3 l\u1eafng nghe (listen) tr\u00ean port \u0111\u00f3.<\/strong><\/p>\n<p>\u0110\u00e2y l\u00e0 &#8220;b\u1eaby Double Firewall&#8221; m\u00e0 h\u1ea7u h\u1ebft c\u00e1c h\u01b0\u1edbng d\u1eabn tr\u00ean m\u1ea1ng kh\u00f4ng nh\u1eafc \u0111\u1ebfn. N\u1ebfu VPS c\u1ee7a b\u1ea1n ch\u1ea1y tr\u00ean n\u1ec1n h\u1ea1 t\u1ea7ng Cloud \u2014 AWS EC2, Google Cloud Compute Engine, Azure Virtual Machine \u2014 th\u00ec t\u01b0\u1eddng l\u1eeda OS (UFW, FirewallD) ch\u1ec9 l\u00e0 l\u1edbp trong. C\u00f2n m\u1ed9t l\u1edbp t\u01b0\u1eddng l\u1eeda ngo\u00e0i n\u1eefa do nh\u00e0 cung c\u1ea5p ki\u1ec3m so\u00e1t: <strong>Security Groups<\/strong> (AWS), <strong>Firewall Rules<\/strong> (Google Cloud), ho\u1eb7c <strong>Network Security Groups<\/strong> (Azure).<\/p>\n<p>Lu\u1ed3ng k\u1ebft n\u1ed1i th\u1ef1c t\u1ebf nh\u01b0 sau: <em>Client \u2192 Security Group c\u1ee7a Cloud \u2192 T\u01b0\u1eddng l\u1eeda OS \u2192 \u1ee8ng d\u1ee5ng<\/em>. N\u1ebfu Security Group ch\u1eb7n, g\u00f3i tin kh\u00f4ng bao gi\u1edd \u0111\u1ebfn \u0111\u01b0\u1ee3c UFW hay FirewallD \u0111\u1ec3 x\u1eed l\u00fd. L\u1ec7nh m\u1edf port c\u1ee7a b\u1ea1n \u0111\u00fang, nh\u01b0ng v\u00f4 ngh\u0129a v\u00ec b\u1ecb ch\u1eb7n t\u1eeb v\u00f2ng ngo\u00e0i.<\/p>\n<p><strong>C\u00e1ch kh\u1eafc ph\u1ee5c:<\/strong> \u0110\u0103ng nh\u1eadp v\u00e0o web portal c\u1ee7a nh\u00e0 cung c\u1ea5p Cloud, t\u00ecm m\u1ee5c Security Group (AWS) ho\u1eb7c Firewall (GCP) t\u01b0\u01a1ng \u1ee9ng v\u1edbi VPS \u0111\u00f3, th\u00eam rule Inbound cho ph\u00e9p port c\u1ea7n thi\u1ebft t\u1eeb IP ngu\u1ed3n ph\u00f9 h\u1ee3p (ho\u1eb7c <code>0.0.0.0\/0<\/code> n\u1ebfu c\u1ea7n m\u1edf public).<\/p>\n<p>Nguy\u00ean nh\u00e2n th\u1ee9 hai \u00edt g\u1eb7p h\u01a1n nh\u01b0ng c\u0169ng x\u1ea3y ra: \u1ee9ng d\u1ee5ng trong VPS ch\u01b0a th\u1ef1c s\u1ef1 bind v\u00e0o port \u0111\u00f3. Ki\u1ec3m tra b\u1eb1ng l\u1ec7nh <code>sudo netstat -tupln | grep 3306<\/code> \u2014 n\u1ebfu kh\u00f4ng th\u1ea5y d\u00f2ng n\u00e0o, MySQL ch\u01b0a ch\u1ea1y ho\u1eb7c \u0111ang bind sai interface. M\u1edf port t\u01b0\u1eddng l\u1eeda m\u00e0 \u1ee9ng d\u1ee5ng kh\u00f4ng listen th\u00ec c\u0169ng kh\u00f4ng c\u00f3 t\u00e1c d\u1ee5ng g\u00ec.<\/p>\n<p><!-- CTA BOX \u2014 M\u1eabu 1 (Gradient Xanh) --><\/p>\n<div style=\"background: linear-gradient(135deg, #1a3c6e 0%, #0f6cbf 100%); border-radius: 12px; padding: 28px 32px; margin: 40px 0; max-width: 100%; box-shadow: 0 4px 20px rgba(15,108,191,0.25);\">\n<div style=\"display: inline-block; background: rgba(255,255,255,0.15); border: 1px solid rgba(255,255,255,0.3); border-radius: 20px; padding: 4px 14px; margin-bottom: 16px;\"><span style=\"color: #ffffff; font-size: 12px; font-weight: 600; letter-spacing: 0.5px; text-transform: uppercase;\">InterData<\/span><\/div>\n<h3 style=\"color: #ffffff; font-size: 22px; font-weight: bold; margin: 0 0 8px 0; line-height: 1.3;\"><span class=\"ez-toc-section\" id=\"Thue-VPS-Gia-Re-%E2%80%94-Toan-Quyen-Quan-Tri-Ho-Tro-Linux-Windows\"><\/span>Thu\u00ea VPS Gi\u00e1 R\u1ebb \u2014 To\u00e0n Quy\u1ec1n Qu\u1ea3n Tr\u1ecb, H\u1ed7 Tr\u1ee3 Linux &amp; Windows<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p style=\"color: rgba(255,255,255,0.85); font-size: 15px; margin: 0 0 20px 0; line-height: 1.6;\">VPS InterData d\u00f9ng <a href=\"https:\/\/interdata.vn\/blog\/cpu-server\/\">CPU<\/a> th\u1ebf h\u1ec7 m\u1edbi, SSD NVMe U.2 t\u1ed1c \u0111\u1ed9 cao \u2014 m\u00f4i tr\u01b0\u1eddng \u1ed5n \u0111\u1ecbnh \u0111\u1ec3 b\u1ea1n c\u1ea5u h\u00ecnh port, firewall, v\u00e0 tri\u1ec3n khai b\u1ea5t k\u1ef3 \u1ee9ng d\u1ee5ng n\u00e0o m\u00e0 kh\u00f4ng b\u1ecb gi\u1edbi h\u1ea1n.<\/p>\n<ul style=\"list-style: none; padding: 0; margin: 0 0 24px 0;\">\n<li style=\"color: rgba(255,255,255,0.9); font-size: 14px; padding: 5px 0; display: flex; align-items: flex-start;\"><span style=\"color: #4fc3f7; font-size: 16px; margin-right: 8px; flex-shrink: 0;\">\u2713<\/span><a href=\"https:\/\/interdata.vn\/blog\/cpu-amd-epyc\/\">CPU AMD EPYC<\/a> \/ Intel Xeon th\u1ebf h\u1ec7 m\u1edbi, SSD NVMe U.2 \u2014 I\/O cao, kh\u00f4ng share disk<\/li>\n<li style=\"color: rgba(255,255,255,0.9); font-size: 14px; padding: 5px 0; display: flex; align-items: flex-start;\"><span style=\"color: #4fc3f7; font-size: 16px; margin-right: 8px; flex-shrink: 0;\">\u2713<\/span>H\u1ed7 tr\u1ee3 c\u00e0i Linux (Ubuntu, CentOS, Debian) v\u00e0 Windows Server \u2014 to\u00e0n quy\u1ec1n root\/admin<\/li>\n<li style=\"color: rgba(255,255,255,0.9); font-size: 14px; padding: 5px 0; display: flex; align-items: flex-start;\"><span style=\"color: #4fc3f7; font-size: 16px; margin-right: 8px; flex-shrink: 0;\">\u2713<\/span>Backup \u0111\u1ecbnh k\u1ef3, <a href=\"https:\/\/interdata.vn\/blog\/bang-thong-la-gi\/\">b\u0103ng th\u00f4ng<\/a> l\u1edbn, h\u1ed7 tr\u1ee3 k\u1ef9 thu\u1eadt th\u1ef1c chi\u1ebfn t\u1ea1i Vi\u1ec7t Nam<\/li>\n<\/ul>\n<p><a style=\"display: inline-block; background: #ffffff; color: #1a3c6e; font-size: 15px; font-weight: bold; text-decoration: none; padding: 12px 28px; border-radius: 8px;\" href=\"https:\/\/interdata.vn\/thue-vps\/\" target=\"_blank\" rel=\"noopener\">D\u00f9ng Th\u1eed VPS Mi\u1ec5n Ph\u00ed 07 Ng\u00e0y \u2192<\/a><\/p>\n<\/div>\n<p><!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"FAQs-%E2%80%94-Cac-cau-hoi-thuong-gap-khi-quan-ly-Port-VPS\"><\/span>FAQs \u2014 C\u00e1c c\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p khi qu\u1ea3n l\u00fd Port VPS<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Lam-sao-de-kiem-tra-port-VPS-da-thong-chua\"><\/span>L\u00e0m sao \u0111\u1ec3 ki\u1ec3m tra port VPS \u0111\u00e3 th\u00f4ng ch\u01b0a?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>C\u00f3 hai c\u00e1ch ki\u1ec3m tra \u0111\u1ed9c l\u1eadp nhau. <strong>T\u1eeb b\u00ean trong VPS:<\/strong> ch\u1ea1y l\u1ec7nh <code>sudo netstat -tupln<\/code> \u0111\u1ec3 xem danh s\u00e1ch c\u00e1c port \u0111ang \u0111\u01b0\u1ee3c \u1ee9ng d\u1ee5ng l\u1eafng nghe (listen). N\u1ebfu th\u1ea5y d\u00f2ng c\u00f3 port b\u1ea1n v\u1eeba m\u1edf, t\u1ee9c l\u00e0 \u1ee9ng d\u1ee5ng \u0111ang ho\u1ea1t \u0111\u1ed9ng \u0111\u00fang. <strong>T\u1eeb b\u00ean ngo\u00e0i internet:<\/strong> d\u00f9ng tool <a href=\"https:\/\/yougetsignal.com\/tools\/open-ports\/\" target=\"_blank\" rel=\"nofollow noopener\">YouGetSignal Open Port Checker<\/a> \u2014 nh\u1eadp IP c\u1ee7a VPS v\u00e0 s\u1ed1 port c\u1ea7n ki\u1ec3m tra. N\u1ebfu b\u00e1o &#8220;open&#8221;, k\u1ebft n\u1ed1i \u0111\u00e3 th\u00f4ng to\u00e0n b\u1ed9 c\u1ea3 hai l\u1edbp firewall. N\u1ebfu b\u00e1o &#8220;closed&#8221; d\u00f9 l\u1ec7nh \u0111\u00e3 ch\u1ea1y th\u00e0nh c\u00f4ng, g\u1ea7n nh\u01b0 ch\u1eafc ch\u1eafn c\u00f2n l\u1edbp Security Group ch\u01b0a m\u1edf.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Co-nen-thay-doi-port-mac-dinh-SSH-22-va-RDP-3389-khong\"><\/span>C\u00f3 n\u00ean thay \u0111\u1ed5i port m\u1eb7c \u0111\u1ecbnh SSH (22) v\u00e0 RDP (3389) kh\u00f4ng?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>N\u00ean \u2014 \u0111\u00e2y l\u00e0 bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt c\u01a1 b\u1ea3n nh\u01b0ng hi\u1ec7u qu\u1ea3. Port 22 v\u00e0 3389 b\u1ecb botnet qu\u00e9t li\u00ean t\u1ee5c 24\/7 \u0111\u1ec3 th\u1eed Brute-force m\u1eadt kh\u1ea9u. Chuy\u1ec3n SSH sang port ng\u1eabu nhi\u00ean nh\u01b0 2222, 47891, hay b\u1ea5t k\u1ef3 s\u1ed1 n\u00e0o t\u1eeb 1024\u201365535 s\u1ebd lo\u1ea1i b\u1ecf g\u1ea7n nh\u01b0 to\u00e0n b\u1ed9 traffic t\u1ea5n c\u00f4ng t\u1ef1 \u0111\u1ed9ng n\u00e0y \u2014 kh\u00f4ng ph\u1ea3i v\u00ec port \u0111\u00f3 an to\u00e0n h\u01a1n v\u1ec1 m\u1eb7t k\u1ef9 thu\u1eadt, m\u00e0 v\u00ec botnet th\u01b0\u1eddng kh\u00f4ng qu\u00e9t port t\u00f9y ch\u1ec9nh. Nh\u1edb m\u1edf port m\u1edbi tr\u00ean firewall tr\u01b0\u1edbc khi \u0111\u1ed5i file c\u1ea5u h\u00ecnh SSH, tr\u00e1nh b\u1ecb kh\u00f3a ra ngo\u00e0i VPS.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Mo-nhieu-port-co-lam-VPS-cham-hon-khong\"><\/span>M\u1edf nhi\u1ec1u port c\u00f3 l\u00e0m VPS ch\u1eadm h\u01a1n kh\u00f4ng?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kh\u00f4ng l\u00e0m ch\u1eadm hi\u1ec7u su\u1ea5t x\u1eed l\u00fd. Firewall rule ch\u1ec9 l\u00e0 danh s\u00e1ch \u0111i\u1ec1u h\u01b0\u1edbng g\u00f3i tin, chi ph\u00ed CPU g\u1ea7n nh\u01b0 kh\u00f4ng \u0111\u00e1ng k\u1ec3. V\u1ea5n \u0111\u1ec1 th\u1ef1c s\u1ef1 l\u00e0 b\u1ea3o m\u1eadt \u2014 m\u1ed7i port m\u1edf ra l\u00e0 m\u1ed9t \u0111i\u1ec3m c\u00f3 th\u1ec3 b\u1ecb t\u1ea5n c\u00f4ng n\u1ebfu d\u1ecbch v\u1ee5 \u0111\u1eb1ng sau \u0111\u00f3 c\u00f3 l\u1ed7 h\u1ed5ng. Nguy\u00ean t\u1eafc th\u1ef1c h\u00e0nh \u0111\u00fang: ch\u1ec9 m\u1edf \u0111\u00fang port n\u00e0o \u0111ang c\u1ea7n, t\u1eaft t\u1ea5t c\u1ea3 port kh\u00f4ng d\u00f9ng \u0111\u1ebfn, v\u00e0 h\u1ea1n ch\u1ebf IP ngu\u1ed3n cho c\u00e1c port nh\u1ea1y c\u1ea3m nh\u01b0 database hay SSH.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Toi-dang-dung-aaPanel-CyberPanel-DirectAdmin-thi-mo-port-bang-lenh-hay-giao-dien\"><\/span>T\u00f4i \u0111ang d\u00f9ng aaPanel \/ CyberPanel \/ DirectAdmin th\u00ec m\u1edf port b\u1eb1ng l\u1ec7nh hay giao di\u1ec7n?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u01afu ti\u00ean thao t\u00e1c tr\u00ean giao di\u1ec7n GUI c\u1ee7a Control Panel \u2014 t\u00ecm m\u1ee5c <strong>Security<\/strong> ho\u1eb7c <strong>Firewall<\/strong> trong dashboard. L\u00fd do: c\u00e1c Control Panel n\u00e0y th\u01b0\u1eddng t\u1ef1 qu\u1ea3n l\u00fd IPTables\/UFW theo c\u00e1ch ri\u00eang. N\u1ebfu b\u1ea1n can thi\u1ec7p b\u1eb1ng l\u1ec7nh OS tr\u1ef1c ti\u1ebfp, c\u00f3 th\u1ec3 x\u1ea3y ra xung \u0111\u1ed9t \u2014 rule b\u1ea1n th\u00eam v\u00e0o b\u1ecb panel ghi \u0111\u00e8, ho\u1eb7c ng\u01b0\u1ee3c l\u1ea1i rule c\u1ee7a panel b\u1ecb l\u1ec7nh c\u1ee7a b\u1ea1n x\u00f3a m\u1ea5t. V\u1edbi aaPanel, v\u00e0o <em>Security \u2192 Firewall \u2192 Add Rule<\/em>; v\u1edbi <a href=\"https:\/\/interdata.vn\/blog\/directadmin-la-gi\/\">DirectAdmin<\/a>, v\u00e0o <em>Administrator \u2192 DirectAdmin Firewall<\/em>. Ch\u1ec9 d\u00f9ng l\u1ec7nh OS khi Control Panel kh\u00f4ng c\u00f3 t\u00f9y ch\u1ecdn qu\u1ea3n l\u00fd firewall.<\/p>\n<p><!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 --><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Ket-luan\"><\/span>K\u1ebft lu\u1eadn<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Port l\u00e0 c\u1eeda ng\u00f5 quy\u1ebft \u0111\u1ecbnh \u1ee9ng d\u1ee5ng c\u1ee7a b\u1ea1n c\u00f3 k\u1ebft n\u1ed1i \u0111\u01b0\u1ee3c v\u1edbi th\u1ebf gi\u1edbi hay kh\u00f4ng. M\u1edf \u0111\u00fang port, \u0111\u00fang tool, \u0111\u00fang l\u1edbp \u2014 \u0111\u00f3 l\u00e0 ba \u0111i\u1ec1u ki\u1ec7n c\u1ea7n \u0111\u1ee7. UFW cho Ubuntu, FirewallD cho CentOS, Defender Firewall cho Windows; v\u00e0 \u0111\u1eebng qu\u00ean ki\u1ec3m tra Security Group n\u1ebfu VPS \u0111ang n\u1eb1m tr\u00ean n\u1ec1n Cloud c\u1ee7a AWS, Azure hay GCP.<\/p>\n<p>Sau khi c\u1ea5u h\u00ecnh xong, lu\u00f4n x\u00e1c minh l\u1ea1i b\u1eb1ng <code>netstat<\/code> ho\u1eb7c YouGetSignal thay v\u00ec gi\u1ea3 \u0111\u1ecbnh r\u1eb1ng m\u1ecdi th\u1ee9 \u0111\u00e3 \u0111\u00fang. M\u1ed9t ph\u00fat ki\u1ec3m tra c\u00f3 th\u1ec3 ti\u1ebft ki\u1ec7m nhi\u1ec1u gi\u1edd debug sau \u0111\u00f3.<\/p>\n<p>N\u1ebfu b\u1ea1n mu\u1ed1n hi\u1ec3u s\u00e2u h\u01a1n v\u1ec1 c\u01a1 ch\u1ebf ho\u1ea1t \u0111\u1ed9ng, c\u00e1ch thi\u1ebft l\u1eadp ban \u0111\u1ea7u v\u00e0 c\u00e1c th\u00f4ng s\u1ed1 k\u1ef9 thu\u1eadt c\u1ee7a m\u00e1y ch\u1ee7 \u1ea3o, h\u00e3y \u0111\u1ecdc b\u00e0i <a href=\"\/blog\/vps-la-gi\/\" target=\"_blank\" rel=\"noopener\">t\u00ecm hi\u1ec3u VPS l\u00e0 g\u00ec to\u00e0n t\u1eadp<\/a> \u2014 n\u1ec1n t\u1ea3ng \u0111\u1ec3 t\u1ef1 tin qu\u1ea3n tr\u1ecb h\u1ea1 t\u1ea7ng tr\u01b0\u1edbc khi \u0111i v\u00e0o c\u1ea5u h\u00ecnh n\u00e2ng cao.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>T\u00f3m t\u1eaft nhanh: M\u1edf port tr\u00ean VPS l\u00e0 thao t\u00e1c c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda (Firewall) \u0111\u1ec3 cho ph\u00e9p lu\u1ed3ng d\u1eef li\u1ec7u \u0111i v\u00e0o (Inbound) ho\u1eb7c \u0111i ra (Outbound) qua m\u1ed9t c\u1ed5ng giao ti\u1ebfp c\u1ee5 th\u1ec3 \u2014 v\u00ed d\u1ee5 port 80 cho Web, port 22 cho SSH. C\u00f4ng c\u1ee5 d\u00f9ng s\u1ebd kh\u00e1c nhau t\u00f9y h\u1ec7 \u0111i\u1ec1u<\/p>\n","protected":false},"author":2,"featured_media":33908,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"class_list":["post-33904","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-vps"],"_links":{"self":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/33904","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/comments?post=33904"}],"version-history":[{"count":5,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/33904\/revisions"}],"predecessor-version":[{"id":40155,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/33904\/revisions\/40155"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/media\/33908"}],"wp:attachment":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/media?parent=33904"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/categories?post=33904"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/tags?post=33904"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}