Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i'm wondering if i can create a Security Group that limits access of internal network , as i know all ports are open for internal network and i wanna limit it

share|improve this question

EC2 security groups only affect incoming communications and do not prevent a server from initiating outbound communications.

The only exception on this rule are Amazon Virtual Private Cloud (VPC) security groups. So if you want to do this you will have to set up your servers in a VPC.

You could always set your firewall to drop all outbound packets (make sure you allow ssh/rdp) on OS level, using the Windows Firewall or iptables in Linux.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.