Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

0
votes
0answers
11 views

UFW insert [number] throws error

Using Ubuntu server 14.04LTS I want to configure my UFW to limit ssh connections with the following command: sudo ufw insert 1 limit ssh/tcp which throws an error: ERROR: Invalid position '1' Due ...
0
votes
0answers
12 views

Forwarding all traffic from port 80 to another IP with ufw

I want that all web traffic (port 80) coming through my server is redirected to another IP (10.0.3.101). I added this code at the end of /etc/ufw/after.rules, but for some reason it is not working. ...
0
votes
0answers
10 views

Setup UFW allow every port from my IP

Is it save to add allow rule to UFW which allow it to connect to every port of my VPS from my own IP (for example 1.2.3.44): To Action From -- ...
-1
votes
1answer
23 views

ufw status (what does the v6 stand for?)

My ufw status output looks like this: To Action From -- ------ ---- 22 ALLOW Anywhere 80/tcp ...
1
vote
1answer
37 views

Blocking illegal traffic to a vps using ufw or/and iptables

I am totally new in this, and I didn't know how to phrase my question title, so it might not be that accurate, forgive me on that matter beforehand. I'm getting some strange requests in my apache ...
7
votes
2answers
251 views

Debugging iptables and common firewall pitfalls?

This is a proposed Canonical Question about understanding and debugging the software firewall on Linux systems. In response to EEAA's answer and @Shog's comment that we need a suitable canonical ...
0
votes
0answers
33 views

UFW not working on Debian while ufw status looks good

The problem is: On a server that has several interfaces, loopback, eth0 with public IP and several Docker virtual interfaces, I wanted to use UFW to deny all of the incoming traffic on eth0 for the ...
0
votes
1answer
21 views

Forwarding over a vpn

I have a group of AWS web servers which will need to get into the business of initiating and speaking TCP over a VPN to a third party. Don't ask me why a VPN is the third party's chosen solution; ...
1
vote
1answer
64 views

How to temporarily open a port in ufw for a specific IP address?

I use ufw (Uncomplicated Firewall) on my web server. Right now I have it set up to allow SSH to the world and fail2ban to prevent massive sign in attempts. The web server has ports 80 and 443 open. ...
0
votes
0answers
72 views

UFW (Ubuntu 14.04) gazillion open ports after adding one rule

I have very strange situation with UFW firewall after upgrading Ubuntu Server 12.04 to 14.04. My UFW status looks like this ubuntu# ufw status verbose Status: active Logging: on (low) Default: deny ...
0
votes
1answer
145 views

ipTables IP Range will not be blocked

I have setup fail2ban with this Tutorial http://wireflare.com/permanently-ban-repeat-offenders-with-fail2ban/ and it seems working. But the attackers are changing their IPs and thats why I decided to ...
0
votes
1answer
48 views

How to extract IP addresses from log?

I'd like to gather information from UFW service, for further analysis. A typical UFW log entry looks like the following: [UFW BLOCK] IN=eth0 OUT= MAC=99:99:99:99:99:99:99:XX:XX:XX:XX:99:99:99 ...
0
votes
0answers
99 views

UFW allow outbound from ip address, deny from others

I am trying to allow outbound connections from a specific IP address and deny outbound from all other ip addreses on port 80, but can't seem to crack it: These are the commands: ufw deny out 80 ufw ...
4
votes
2answers
743 views

How to make netstat on Linux only show OUTBOUND tcp connections?

My ubuntu server is infected and there is a process making a bunch of HTTP requests to a bunch of websites (sucks!). I have added the following to my firewall (UFW): sudo ufw deny out proto tcp to ...
2
votes
1answer
111 views

UFW rules in place and enabled yet traffic still allowed

I have UFW configured to try and block some unwanted IPs and associated requests. #ufw status |less Status: active To Action From -- ------ ...
1
vote
1answer
53 views

Check ufw default action

I know it's very easy to set the default behavior of ufw, e.g. ufw default deny, but how do I check what the default is? It does not show in ufw status.
0
votes
0answers
35 views

nginx upstream an ufw

I have a WSGI server on port 8080 and Nginx with following setup: server { location / { proxy_pass http://localhost:8080; } } when I enable UFW I can't access my page in ...
0
votes
0answers
20 views

Linux: UFW blocks connections out via certain ports, how can i find which process initiated it?

I am noticing repeating attempts on my server to connect to a certain IP, UFW logs all the details, including the source port. Is there a way to log which process is initiating this? I am concerned ...
0
votes
2answers
69 views

Can I prevent some of the UFW messages from being logged?

My router broadcasts (sends to 224.0.0.1) something every forty seconds. This is caught by UFW which stores a log entry in syslog: Jan 5 03:49:02 log kernel: [ 1184.788900] [UFW BLOCK] IN=eth0 ...
0
votes
1answer
103 views

Allowing outgoing connections to a particular IP with ufw

I have disabled outgoing connections as a whole with UFW seeing that I didn't want to take chances with my vBulletin forum exposing my server's IP address to attackers (I use CloudFlare). As I've ...
0
votes
3answers
416 views

ping and traceroute does not work when UFW deny outgoing by default

How to make ping and traceroute work after setting UFW with deny outgoing by default? Here is my UFW configuration: sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), ...
0
votes
1answer
313 views

UFW deny all incoming except SSH

I am about to configure firewall with UFW. I am logged in over SSH so I don't know if the terminal will be locked out as soon as I do: sudo ufw default deny incoming If so, how can I deny all ...
2
votes
1answer
359 views

Security implications of setting UFW default_forward_policy to accept?

The docker manual (http://docs.docker.com/installation/ubuntulinux/#docker-and-ufw) states that it's nescessary to set UFWs DEFAULT_FORWARD_POLICY to "ACCEPT" so docker containers can reach each ...
0
votes
1answer
58 views

Ubuntu UFW setup on database server for connections to a varying array of clustered applications

I'm a little confused and could use some clarification. Let's say I want to deny all connections to a mongodb server, except for to SSH from my IP and from my IP to port 27017. The way I understand ...
0
votes
0answers
61 views

How to setup in foreman puppets module ufw for deny outgoing?

i have problem with setup ufw rules in foreman via ufw module for puppet. Setup in foreman for ufw deny is following: ufw:deny port: 3128 ip: any After sync client with puppet master: $ sudo ...
2
votes
2answers
512 views

How to utilize UFW blocking published ports from docker

Might seem a silly question but i'm trying to get the following to work: I have a correctly configured UFW for only allowing certain source IPs access to my local service after migrating this ...
0
votes
0answers
34 views

HowTo: Let ufw block single IPs when default policy is ALLOW

I want to be able to block certain IPs from accessing my server. As I don't really know what services are running on what port on the machine, I decided to quick&dirty let ufw's default policy be ...
0
votes
1answer
828 views

ufw seems to block all incoming connections when defaulting to block outgoing

I am currently trying to configure ufw on Ubuntu 12.04 but to my understanding it behaves oddly. i tried allowing just some services on a remote machine, denying everything else. I thought - anyway, i ...
0
votes
1answer
152 views

Configure ufw pptpd and dnsmasq on the same server

I've got a an ubuntu 14 server running both pptpd and dnsmasq. I'm having trouble configuring ufw to allow pptp clients to resolve their DNS queries using the local dnsmasq server. I've correctly ...
-1
votes
1answer
440 views

Something is filtering 27017 port even then firewall is not working

Good day, i' trying to move mongodb database to separate VPS from application, but VPS was pre-configured not by me. I have instance with running mongodb on 27017 port: COMMAND PID USER FD ...
1
vote
1answer
433 views

Trouble with Fail2Ban UFW Portscan Filter

I'm trying to create a filter for fail2ban that recognises port scans in the UFW logs. I've confirmed my ban action is working correctly on other filters and am having trouble creating the correct ...
3
votes
1answer
229 views

ufw cancel port forward

On Ubuntu server 14.04, I enabled ufw port forwarding from 80 to 8181 (tcp) by using the checked answer on Can I use ufw to setup a port forward? Finally I'd rather proxy http request using apache2 ...
1
vote
1answer
2k views

Cannot open samba ports on Ubuntu 14.04

I'm newbie to linux firewalls root@Ubntu:~# ufw status verbose state: active logging: on (low) Default: deny (incoming), allow (outgoing), disabled (routed) new profiles: skip 137,138/udp (Samba) ...
0
votes
1answer
323 views

Iptables to UFW before.rules not working

I've got the follwing working iptables commands: iptables -t nat -i ppp0 -A PREROUTING -p tcp --dport 81 -j DNAT --to-destination 192.168.16.8:80 iptables -t nat -A POSTROUTING -p tcp --dport 80 -j ...
0
votes
0answers
26 views

Firewall Ubuntu UFW port 22

I use ufw firewall, on port 22. I have given the command: sudo ufw allow from a.b.c.d to any port 22. sudo ufw status output looks like: To Action From 22 allow a.b.c.d The OS is ubuntu 12.04 4 ...
0
votes
1answer
218 views

UFW: can't connect to SSH with “to 127.0.0.1” option

i tried to restrict the SSH connectivity to a subnet and wanted to set the "to" part to localhost. (Server will be routing over bridge device to virtual servers, and i wanted do drop ssh connections ...
0
votes
1answer
2k views

Softether vpn ufw firewall config - is it correct?

I've correctly installed and configured Softether on my Ubuntu 14 x64 VPS in local bridge mode with a virtual TAP interface. What I have now is a fully functioning L2TP/IPSEC server with two network ...
0
votes
1answer
496 views

How to block spambots and about security

Is it normal to have many many lines in /var/log/kern.log about UFW block? For example: Aug 29 22:13:13 myvps kernel: [1980808.931708] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=60.173.8.240 DST=me ...
1
vote
0answers
103 views

`ufw insert 1 deny to any` not working

ufw insert 1 deny to any ufw enable ufw status Status output: Status: active Logging: on (high) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip To ...
0
votes
2answers
2k views

How to delete all ufw rules for a certain port?

I am using ansible to configure ufw on my DB servers to only let accept connections from certain servers connection to a specific port (lets say 1234). When a server that used to have access is taken ...
0
votes
1answer
231 views

UFW blocking webrick on port 3000

On a ubuntu 10.0.4 server runs redmine. starting webrick with: ./server webrick -e production -b lvps46-173-79-113.dedicated.hosteurope.de -d makes redmine available in browser. as soon as we ...
0
votes
2answers
158 views

How do I test my firewall rules?

I've setup some rules in ufw and I've turned it on. Now I want to ensure my rules actually block traffic. However, when running nmap -PN -p <my_port> <ip> from my local workstation it ...
0
votes
1answer
620 views

Why does the DOCKER chain show in `ufw raw` but not using `iptables -L`

If I run sudo ufw raw, I can see an iptables chain called 'DOCKER': Chain DOCKER (2 references) pkts bytes target prot opt in out source destination 0 0 DNAT ...
0
votes
2answers
4k views

telnet connection refused despite ufw having ports open [closed]

How is this possible? I dont understand Server A ip=111.111.111.111 Server B ip=222.222.222.222 Server A: ufw status 23 ALLOW 222.222.222.222 9160 ...
0
votes
1answer
225 views

Iptables/ufw - blocking ports when using nat

I use NAT to move requests from external ports to an internal ip address and port hosted with proxmox. Something like this: iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 8000 -j DNAT --to ...
1
vote
1answer
124 views

Something (but not iptables) mysteriously redirects network traffic - how to diagnose?

Summary There is a virtualbox host (1.1.1.5) and a routed guest (1.1.1.6). Something redirects any traffic on port 25 with the guest, whether ingoing or outgoing, to 1.1.1.5 port 2525 and I cannot ...
0
votes
1answer
76 views

ufw instead of pure iptables

I am running an Ubuntu server VPS that several people with varying networking skills need to manage. Currently the server is protected by iptables. I am considering using ufw to gain simplicity. What ...
1
vote
0answers
183 views

strongswan packet get natted when ufw is enabled

I'm using strongswan 4.6.4 to connect road warriors to my server (ubuntu 13.10), which is natted behind a firewall. left=%defaultroute leftsubnet=10.10.1.0/24 right=%any ...
0
votes
1answer
1k views

Locked myself out of SSH with UFW

I had my server set up to accept SSH connections on port 21966, I followed some steps to configure ufw however it has now locked me out of all SSH access on any port! I've been able to boot my ...
1
vote
3answers
528 views

Is this a security breach?

I have a server running Ubuntu 10.04LTS (I know it is too old), which over the last couple of weeks has on occasion been unresponsive to network traffic, and needed a hard reset first thing in the ...