Questions tagged [ufw]

Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

479 questions
6
votes
1 answer

UFW logging a block on a permitted port

My current ufw status is as follows. UFW is set to default deny. [ 1] SSH ALLOW IN 10.1.0.0/16 [ 2] DNS ALLOW IN 10.1.0.0/16 [ 3] DNS ALLOW IN …
Mike
  • 251
  • 1
  • 3
  • 9
6
votes
1 answer

I accidentaly enabled the UFW on my Google Cloud Computer

I accidentally enabled the UFW on my Google Cloud Compute debian instance and unfortunately port 22 is blocked now. I've tried every way to go inside the VM but I can't. I'm trying to access through the serial port but it's asking me for user and…
6
votes
1 answer

Cannot port forward with UFW on Ubuntu

I am trying to get port fowarding to work to expose a LXC container, when using ufw on Ubuntu, but to no avail. I have constructed the following workflow from guides around the Internet ([1][2][3]); most notably the section about…
taifwa
  • 223
  • 3
  • 9
6
votes
3 answers

Allowing outgoing connections to a particular IP with ufw

I have disabled outgoing connections as a whole with UFW seeing that I didn't want to take chances with my vBulletin forum exposing my server's IP address to attackers (I use CloudFlare). As I've done this, I've noticed I am unable to query one…
Lorenc
  • 117
  • 1
  • 2
  • 7
6
votes
4 answers

ping and traceroute does not work when UFW deny outgoing by default

How to make ping and traceroute work after setting UFW with deny outgoing by default? Here is my UFW configuration: sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), deny (outgoing), disabled (routed) New profiles:…
Michael
  • 471
  • 1
  • 7
  • 14
6
votes
4 answers

ufw blocking apt and dns

I installed ufw on my Debian system like the following: # aptitude install ufw # ufw limit 22 # ufw allow 80 # ufw allow 443 # ufw enable # ufw status verbose Status: active Logging: on (low) Default: deny (incoming), allow (outgoing) New profiles:…
Fleshgrinder
  • 3,798
  • 2
  • 17
  • 20
5
votes
1 answer

UFW not blocking incoming traffic

I have a Debian 9 Server running UFW, and i'd like to block all incoming requests except on port 2122 (SSH), and 80/443 (For HTTP(s)). I ran the following commands : ufw reset ufw default deny incoming ufw default allow outgoing ufw allow incoming…
Rogue
  • 153
  • 1
  • 4
5
votes
1 answer

Firewall completely disabled but still cant access port - Centos7

I have disabled selinux in /etc/sysconfig/selinux: SELINUX=disabled rebooted and disabled both firewalld and iptables services. # sestatus SELinux status: disabled # systemctl status firewalld ● firewalld.service - firewalld -…
Jacques MALAPRADE
  • 153
  • 1
  • 1
  • 5
5
votes
2 answers

Google compute - SSH - port 22 blocked by ufw

Well, I was doing some server setup reading this article and ran the following commands - sudo apt-get install ufw sudo ufw enable sudo ufw allow 80/tcp sudo ufw allow 443/tcp This basically closed all other ports and now SSH is not working at…
A G
  • 163
  • 1
  • 7
5
votes
1 answer

How can allow an ssh connection only over vpn

I install OpenVPN on my server following this guide --> https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04 I also setup a firewall with ufw where I add rule to allow ssh connection only from my interal…
jack_0
  • 51
  • 1
  • 3
5
votes
1 answer

UFW - Rules by Service Name Versus Port and Protocol

What is the difference between creating allow/deny rules via a service versus a port and protocol? For example: ufw allow ssh versus ufw allow 22/tcp or even, ufw allow ssh/tcp. Which is the 1) cleanest 2) most restrictive 3) best way to approach?
DanCat
  • 225
  • 2
  • 8
5
votes
1 answer

Do I need to open any port for NTP synchronization to work if both outgoing and incoming are blocked on ufw?

One of my production servers, UFW configuration is as follows: Status: active Logging: on (low) Default: deny (incoming), **deny (outgoing)**, disabled (routed) New profiles: skip To Action From -- …
user2436428
  • 137
  • 1
  • 2
  • 8
5
votes
1 answer

Allow UFW access from IP wildcard

I would like to allow access from IP address based upon wildcards e.g. 64.201.52* How can this be done with UFW? Have tried sudo ufw allow from 64.201.52.*
Franco
  • 163
  • 1
  • 4
5
votes
1 answer

UFW insert [number] throws error

Using Ubuntu server 14.04LTS I want to configure my UFW to limit ssh connections with the following command: sudo ufw insert 1 limit ssh/tcp which throws an error: ERROR: Invalid position '1' Due to the fact that this command accepts no number at…
Mike
  • 163
  • 1
  • 5
5
votes
1 answer

How to temporarily open a port in ufw for a specific IP address?

I use ufw (Uncomplicated Firewall) on my web server. Right now I have it set up to allow SSH to the world and fail2ban to prevent massive sign in attempts. The web server has ports 80 and 443 open. What I would like to do is close SSH access until…
user16578951
  • 51
  • 1
  • 2
1 2
3
31 32