0

Ubuntu 10.04 | VPS

Hi guys, I'm setting up a VPS server running Ubuntu 10.04 and I presently just want to allow ssh.

I thought the following ufw commands would work...

ufw default deny
ufw allow 22
ufw allow from <local IP of vps>
ufw enable

SSH works fine. But established sessions seem to be blocked -- the vps host can't ping other servers, perform DNS queries, etc. How do I tell ufw that it's OK for the server to send OUTBOUND requests anywhere while still remaining protected?


In response to andol's question, here are the results of ufw status verbose:

Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing)
New profiles: skip

To                         Action      From
--                         ------      ----
10022                      ALLOW IN    Anywhere
Anywhere                   ALLOW IN    <local IP>

Obviously the second rule is wrong so I deleted it and the problem still persists.

3
  • What does "ufw status verbose" give you?
    – andol
    Jul 4, 2010 at 7:26
  • @andol Output in description.
    – Mike B
    Jul 4, 2010 at 7:37
  • The default "allow (outgoing)" should really take care of just that. Does everything work as it should when you disable ufw on the VPS?
    – andol
    Jul 4, 2010 at 7:55

1 Answer 1

3

I think I found the problem. Apparently, UFW doesn't work well with OpenVZ hosts... more info here: http://blog.bodhizazen.net/uncategorized/how-to-use-ufw-in-openvz-templates/

1
  • Yeah, once you leave userspace a OpenVZ guest can behave a bit special...
    – andol
    Jul 4, 2010 at 8:31

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .