Firewall

Your firewall controls which connections can reach your device.

September 30, 2026

With Firewall Protection enabled, incoming connections are blocked unless you explicitly allow them.

With Mesh Networking enabled, ports will be open for all devices on the same account.

1.Set up your firewall

On the doxx.net app: Account → Settings ⚙ → Connection Settings → Firewall.

On the doxx.net portal: My Network → Tunnel List → (the specific tunnel you want to configure) → Connection → Firewall

  1. Enable Firewall Protection.
  2. If you want all your devices to communicate with each other, enable Full Mesh Network.
    1. In the portal this is under Tunnel Linking (Right above Firewall).
  3. To allow a service or site, choose a Quick Preset. For a more specific allowance, select Add Custom Rule.

Quick Presets allow incoming connections from anywhere within the address’s scope. Only enable the services you intend to make reachable.

2.Additional features

  • Full Mesh Network: Let your devices communicate over the encrypted network, regardless of which doxx.net server each uses.
  • SSH preset: Allow connections on port 22 for remote terminal access.
  • Web preset: Allow connections on ports 80 and 443 for web services.
  • Ping preset: Allow ICMP requests used to check reachability.
  • Custom rules: Add specific connection allowances.
  • Address display: View and copy your device’s doxx.net IPv4 and IPv6 addresses.

3.Common questions

Does Full Mesh Network make my devices public?

Full Mesh Network allows your own devices to communicate with each other. It isn’t the same as allowing incoming connections from the public internet.

Does allowing a port start the service?

No. The application or server using that port still needs to be running on the device.

Do IPv4 and IPv6 rules have the same reach?

Not for the addresses shown on this screen. The displayed IPv4 address is internal to doxx.net, while the IPv6 address is public. An IPv6 allowance can therefore permit connections from the public internet.

Is this the same as Smart Blocking?

No. Firewall rules control incoming connections to your device. Smart Blocking filters domain lookups for things such as ads, trackers and malicious sites.