你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站，请访问 https://docs.azure.cn。

Delete firewall rules

With public access enabled, you can configure firewall rules to allow connections originating from specific IP addresses, or from any Azure service.

Portal

Using the Azure portal:

1. Select your Azure Database for PostgreSQL flexible server.

2. In the resource menu, select Overview.

   

3. The status of the server must be Available, for the Networking menu option to be enabled.

   

4. If the status of the server isn't Available, the Networking option is disabled.

   

Note

Any attempt to configure the networking settings of a server whose status is other than available, would fail with an error.

5. In the resource menu, select Networking.

   

6. If you want to delete a firewall rule, select the icon that resembles a trash bin, which is located to the right of the rule definition.

   

7. If you want to delete the firewall rule that allows connections originating from any IP address allocated to any Azure service or asset, clear the Allow public access from any Azure service within Azure to this server checkbox.

   

Important

Allow public access from any Azure service within Azure to this server creates a firewall rule whose start and end IP addresses are set to 0.0.0.0. The presence of such rule configures the firewall to allow connections from IP addresses allocated to any Azure service or asset, including connections from the subscriptions of other customers.

8. Select Save.

   

9. A notification informs you that the changes are being applied.

   

10. Also, the status of the server changes to Updating.

    

11. When the process completes, a notification informs you that the changes were applied.

    

12. Also, the status of the server changes to Available.

    

CLI

You can delete firewall rules from a server via the az postgres flexible-server firewall-rule delete command.

az postgres flexible-server firewall-rule delete --resource-group <resource_group> --name <server> --rule-name <rule>

If you attempt to delete a firewall rule on a server which isn't in Available state, you receive an error like this:

Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '<tracking_id>'

Note

Firewall rule names can only contain 0-9, a-z, A-Z, -, and _. Additionally, the name of the firewall rule must be at least 3 characters, and no more than 128 characters in length.

If you attempt to delete a firewall rule with an invalid name, you receive an error like this:

The firewall rule name can only contain 0-9, a-z, A-Z, '-' and '_'. Additionally, the name of the firewall rule must be at least 3 characters and no more than 128 characters in length. 

If you attempt to remove a firewall rule from a server that doesn't have public access enabled, you receive an error like this:

Firewall rule operations cannot be requested for a private access enabled server.

Related content

• Networking.
• Enable public access.
• Disable public access.
• Add firewall rules.
• Add private endpoint connections.
• Delete private endpoint connections.
• Approve private endpoint connections.
• Reject private endpoint connections.