# doctl databases firewalls – DigitalOcean Documentation

> The subcommands under `doctl databases firewalls` enable the management of firewalls for database clusters.

- [doctl databases firewalls append](https://docs.digitalocean.com/reference/doctl/reference/databases/firewalls/append/index.html.md): Appends a single rule to the existing firewall rules of the specified database. This command requires the `--rule` flag specifying the resource or resources allowed to access the database cluster. The rule passed to the `--rule` flag must be in a : format …
- [doctl databases firewalls list](https://docs.digitalocean.com/reference/doctl/reference/databases/firewalls/list/index.html.md): This command lists the following details for each firewall rule in a given database: - The UUID of the firewall rule - The UUID of the cluster for which the rule is applied - The type of resource that the firewall rule allows to access the database …
- [doctl databases firewalls remove](https://docs.digitalocean.com/reference/doctl/reference/databases/firewalls/remove/index.html.md): Removes single rule from the list of firewall rules for a specified database. You can retrieve a firewall rule's UUIDs by calling: doctl database firewalls list
- [doctl databases firewalls replace](https://docs.digitalocean.com/reference/doctl/reference/databases/firewalls/replace/index.html.md): Replace the firewall rules for a specified database. This command requires the `--rule` flag. You can configure multiple rules for the firewall by passing additional arguments in a comma-separated list with the `--rule` flag. Each rule passed using the …