Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

1
vote
0answers
12 views

Docker's iptables=false option seems to have not the desired behavior

Good morning at all. I am running Ubuntu 14.04 server and Docker 1.8.1 and UFW is my front-end to manage iptables. I need to run an application into a container. I do need the following behavior: ...
1
vote
1answer
8 views

ufw port forwarding not working

I'm trying to set up an ubuntu 14.04 server as a router that also does some port forwarding. I've got the router part working but cannot for the life of me figure out why the port forwarding isn't ...
0
votes
0answers
13 views

UFW - Set correct kernel params

As every system administrator does, one of the first things i did right after booting up my web server was install ufw and tune/set kernel parameters in /etc/sysctl.conf. By the way, this is my ...
0
votes
0answers
31 views

Forward SSH to OpenVPN client via UFW

I have an Ubuntu 14 server that is running OpenVPN gateway and ufw. Let's call it Server A. I have an IP reservation for a permanently connected server (Server B). It always connects to OpenVPN and ...
1
vote
1answer
18 views

Does order of UFW rules matter?

When I first initialized my ufw, I did ufw default allow outgoing ufw default deny incoming ufw allow 80/tcp ufw allow 22/tcp Over the last week or so, I've been going through my access logs and ...
0
votes
0answers
18 views

UFW blocking open ports until manual reload

I'm having a hard time getting my head around this ufw issue I'm having. Here is the output of ufw status verbose: Status: active Logging: on (low) Default: deny (incoming), allow ...
0
votes
0answers
20 views

UFW insert [number] throws error

Using Ubuntu server 14.04LTS I want to configure my UFW to limit ssh connections with the following command: sudo ufw insert 1 limit ssh/tcp which throws an error: ERROR: Invalid position '1' Due ...
0
votes
0answers
17 views

Forwarding all traffic from port 80 to another IP with ufw

I want that all web traffic (port 80) coming through my server is redirected to another IP (10.0.3.101). I added this code at the end of /etc/ufw/after.rules, but for some reason it is not working. ...
0
votes
0answers
13 views

Setup UFW allow every port from my IP

Is it save to add allow rule to UFW which allow it to connect to every port of my VPS from my own IP (for example 1.2.3.44): To Action From -- ...
-1
votes
1answer
29 views

ufw status (what does the v6 stand for?)

My ufw status output looks like this: To Action From -- ------ ---- 22 ALLOW Anywhere 80/tcp ...
1
vote
1answer
49 views

Blocking illegal traffic to a vps using ufw or/and iptables

I am totally new in this, and I didn't know how to phrase my question title, so it might not be that accurate, forgive me on that matter beforehand. I'm getting some strange requests in my apache ...
7
votes
2answers
308 views

Debugging iptables and common firewall pitfalls?

This is a proposed Canonical Question about understanding and debugging the software firewall on Linux systems. In response to EEAA's answer and @Shog's comment that we need a suitable canonical ...
0
votes
0answers
38 views

UFW not working on Debian while ufw status looks good

The problem is: On a server that has several interfaces, loopback, eth0 with public IP and several Docker virtual interfaces, I wanted to use UFW to deny all of the incoming traffic on eth0 for the ...
0
votes
1answer
21 views

Forwarding over a vpn

I have a group of AWS web servers which will need to get into the business of initiating and speaking TCP over a VPN to a third party. Don't ask me why a VPN is the third party's chosen solution; ...
1
vote
1answer
104 views

How to temporarily open a port in ufw for a specific IP address?

I use ufw (Uncomplicated Firewall) on my web server. Right now I have it set up to allow SSH to the world and fail2ban to prevent massive sign in attempts. The web server has ports 80 and 443 open. ...
0
votes
0answers
86 views

UFW (Ubuntu 14.04) gazillion open ports after adding one rule

I have very strange situation with UFW firewall after upgrading Ubuntu Server 12.04 to 14.04. My UFW status looks like this ubuntu# ufw status verbose Status: active Logging: on (low) Default: deny ...
0
votes
1answer
169 views

ipTables IP Range will not be blocked

I have setup fail2ban with this Tutorial http://wireflare.com/permanently-ban-repeat-offenders-with-fail2ban/ and it seems working. But the attackers are changing their IPs and thats why I decided to ...
0
votes
1answer
51 views

How to extract IP addresses from log?

I'd like to gather information from UFW service, for further analysis. A typical UFW log entry looks like the following: [UFW BLOCK] IN=eth0 OUT= MAC=99:99:99:99:99:99:99:XX:XX:XX:XX:99:99:99 ...
0
votes
0answers
133 views

UFW allow outbound from ip address, deny from others

I am trying to allow outbound connections from a specific IP address and deny outbound from all other ip addreses on port 80, but can't seem to crack it: These are the commands: ufw deny out 80 ufw ...
4
votes
2answers
1k views

How to make netstat on Linux only show OUTBOUND tcp connections?

My ubuntu server is infected and there is a process making a bunch of HTTP requests to a bunch of websites (sucks!). I have added the following to my firewall (UFW): sudo ufw deny out proto tcp to ...
2
votes
1answer
141 views

UFW rules in place and enabled yet traffic still allowed

I have UFW configured to try and block some unwanted IPs and associated requests. #ufw status |less Status: active To Action From -- ------ ...
1
vote
1answer
67 views

Check ufw default action

I know it's very easy to set the default behavior of ufw, e.g. ufw default deny, but how do I check what the default is? It does not show in ufw status.
0
votes
0answers
43 views

nginx upstream an ufw

I have a WSGI server on port 8080 and Nginx with following setup: server { location / { proxy_pass http://localhost:8080; } } when I enable UFW I can't access my page in ...
0
votes
0answers
21 views

Linux: UFW blocks connections out via certain ports, how can i find which process initiated it?

I am noticing repeating attempts on my server to connect to a certain IP, UFW logs all the details, including the source port. Is there a way to log which process is initiating this? I am concerned ...
0
votes
2answers
76 views

Can I prevent some of the UFW messages from being logged?

My router broadcasts (sends to 224.0.0.1) something every forty seconds. This is caught by UFW which stores a log entry in syslog: Jan 5 03:49:02 log kernel: [ 1184.788900] [UFW BLOCK] IN=eth0 ...
0
votes
1answer
121 views

Allowing outgoing connections to a particular IP with ufw

I have disabled outgoing connections as a whole with UFW seeing that I didn't want to take chances with my vBulletin forum exposing my server's IP address to attackers (I use CloudFlare). As I've ...
0
votes
3answers
487 views

ping and traceroute does not work when UFW deny outgoing by default

How to make ping and traceroute work after setting UFW with deny outgoing by default? Here is my UFW configuration: sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), ...
0
votes
1answer
361 views

UFW deny all incoming except SSH

I am about to configure firewall with UFW. I am logged in over SSH so I don't know if the terminal will be locked out as soon as I do: sudo ufw default deny incoming If so, how can I deny all ...
3
votes
1answer
417 views

Security implications of setting UFW default_forward_policy to accept?

The docker manual (http://docs.docker.com/installation/ubuntulinux/#docker-and-ufw) states that it's nescessary to set UFWs DEFAULT_FORWARD_POLICY to "ACCEPT" so docker containers can reach each ...
0
votes
1answer
63 views

Ubuntu UFW setup on database server for connections to a varying array of clustered applications

I'm a little confused and could use some clarification. Let's say I want to deny all connections to a mongodb server, except for to SSH from my IP and from my IP to port 27017. The way I understand ...
0
votes
0answers
68 views

How to setup in foreman puppets module ufw for deny outgoing?

i have problem with setup ufw rules in foreman via ufw module for puppet. Setup in foreman for ufw deny is following: ufw:deny port: 3128 ip: any After sync client with puppet master: $ sudo ...
2
votes
2answers
568 views

How to utilize UFW blocking published ports from docker

Might seem a silly question but i'm trying to get the following to work: I have a correctly configured UFW for only allowing certain source IPs access to my local service after migrating this ...
0
votes
0answers
34 views

HowTo: Let ufw block single IPs when default policy is ALLOW

I want to be able to block certain IPs from accessing my server. As I don't really know what services are running on what port on the machine, I decided to quick&dirty let ufw's default policy be ...
0
votes
1answer
906 views

ufw seems to block all incoming connections when defaulting to block outgoing

I am currently trying to configure ufw on Ubuntu 12.04 but to my understanding it behaves oddly. i tried allowing just some services on a remote machine, denying everything else. I thought - anyway, i ...
1
vote
1answer
174 views

Configure ufw pptpd and dnsmasq on the same server

I've got a an ubuntu 14 server running both pptpd and dnsmasq. I'm having trouble configuring ufw to allow pptp clients to resolve their DNS queries using the local dnsmasq server. I've correctly ...
-1
votes
1answer
507 views

Something is filtering 27017 port even then firewall is not working

Good day, i' trying to move mongodb database to separate VPS from application, but VPS was pre-configured not by me. I have instance with running mongodb on 27017 port: COMMAND PID USER FD ...
1
vote
1answer
514 views

Trouble with Fail2Ban UFW Portscan Filter

I'm trying to create a filter for fail2ban that recognises port scans in the UFW logs. I've confirmed my ban action is working correctly on other filters and am having trouble creating the correct ...
3
votes
1answer
242 views

ufw cancel port forward

On Ubuntu server 14.04, I enabled ufw port forwarding from 80 to 8181 (tcp) by using the checked answer on Can I use ufw to setup a port forward? Finally I'd rather proxy http request using apache2 ...
1
vote
1answer
2k views

Cannot open samba ports on Ubuntu 14.04

I'm newbie to linux firewalls root@Ubntu:~# ufw status verbose state: active logging: on (low) Default: deny (incoming), allow (outgoing), disabled (routed) new profiles: skip 137,138/udp (Samba) ...
0
votes
1answer
340 views

Iptables to UFW before.rules not working

I've got the follwing working iptables commands: iptables -t nat -i ppp0 -A PREROUTING -p tcp --dport 81 -j DNAT --to-destination 192.168.16.8:80 iptables -t nat -A POSTROUTING -p tcp --dport 80 -j ...
0
votes
0answers
26 views

Firewall Ubuntu UFW port 22

I use ufw firewall, on port 22. I have given the command: sudo ufw allow from a.b.c.d to any port 22. sudo ufw status output looks like: To Action From 22 allow a.b.c.d The OS is ubuntu 12.04 4 ...
0
votes
1answer
248 views

UFW: can't connect to SSH with “to 127.0.0.1” option

i tried to restrict the SSH connectivity to a subnet and wanted to set the "to" part to localhost. (Server will be routing over bridge device to virtual servers, and i wanted do drop ssh connections ...
0
votes
1answer
2k views

Softether vpn ufw firewall config - is it correct?

I've correctly installed and configured Softether on my Ubuntu 14 x64 VPS in local bridge mode with a virtual TAP interface. What I have now is a fully functioning L2TP/IPSEC server with two network ...
0
votes
1answer
530 views

How to block spambots and about security

Is it normal to have many many lines in /var/log/kern.log about UFW block? For example: Aug 29 22:13:13 myvps kernel: [1980808.931708] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=60.173.8.240 DST=me ...
1
vote
0answers
105 views

`ufw insert 1 deny to any` not working

ufw insert 1 deny to any ufw enable ufw status Status output: Status: active Logging: on (high) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip To ...
0
votes
2answers
2k views

How to delete all ufw rules for a certain port?

I am using ansible to configure ufw on my DB servers to only let accept connections from certain servers connection to a specific port (lets say 1234). When a server that used to have access is taken ...
0
votes
1answer
265 views

UFW blocking webrick on port 3000

On a ubuntu 10.0.4 server runs redmine. starting webrick with: ./server webrick -e production -b lvps46-173-79-113.dedicated.hosteurope.de -d makes redmine available in browser. as soon as we ...
0
votes
2answers
172 views

How do I test my firewall rules?

I've setup some rules in ufw and I've turned it on. Now I want to ensure my rules actually block traffic. However, when running nmap -PN -p <my_port> <ip> from my local workstation it ...
0
votes
1answer
632 views

Why does the DOCKER chain show in `ufw raw` but not using `iptables -L`

If I run sudo ufw raw, I can see an iptables chain called 'DOCKER': Chain DOCKER (2 references) pkts bytes target prot opt in out source destination 0 0 DNAT ...
0
votes
2answers
4k views

telnet connection refused despite ufw having ports open [closed]

How is this possible? I dont understand Server A ip=111.111.111.111 Server B ip=222.222.222.222 Server A: ufw status 23 ALLOW 222.222.222.222 9160 ...