Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using a datacenter in Hong Kong (clould provider). I have monitoring servers in tokyo and I am using uwf for ubuntu 64 12.04 to limit access. I have never used ip tables, only ufw.

My rules on the clould allow for access for the monitoring IP address. But, the servers will be sending data to the monitoring servers namely for graphite and M/monit.

Because I am booting up and shutting down servers what is the proper questions I should ask the sys admins at the DC in HK in terms of getting the required info to allow for access from all servers from the DC? Thier ip address block ranges? Subnet mask ranges? In essence, how can I use ufw to allow for access for servers coming from HK DC? How to I use ufw to input that info?


share|improve this question
up vote 0 down vote accepted

You would need to get a list of IP ranges which your cloud instances could start with, and then configure UFW to allow access from those ranges, with something like this for each range:

ufw allow in on eth0 from proto tcp to any port 1234

Your cloud provider may not be willing to provide you with that information however, in which case you'll have to guess it. Take some IPs which your cloud instances have used in the past and do a whois lookup on them to determine the range which it belongs to.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.