Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

1
vote
0answers
9 views

Can UFW read in rules from multiple files?

I see that UFW (UncomplicatedFireWall) will read in its rules from /lib/ufw/user.rules. However, it would be convenient if the rules could by split across multiple files, so that different servers can ...
0
votes
1answer
12 views

How to configure postfix with ufw so that my web server can send email but it doesn't act as an open relay?

According to this guide: It is important to secure your server and make sure that Postfix is not configured as an open relay. It links to another guide which suggests using UFW as a firewall. ...
0
votes
0answers
51 views

ssh login timed out after enabling the ufw firewall ubuntu server

I followed digital ocean tutorial to enable the firewall in my ubuntu server. The steps I performed is: 1> change the port no to some other no. (8338) 2> enable firewall using sudo ufw allow ...
0
votes
1answer
26 views

ufw & iptables confusion

I have previously added some netfilter rules via iptables. I'd now like to manage these rules through ufw and to simplify things I wanted to get rid of the current rules and start afresh as if I was ...
1
vote
3answers
35 views

UFW: How to block http requests on another port than 80?

I am running an application on port 7000 which is part of a network. So it has to communicate over port 7000 with all other servers of the network (not LAN, dynamic IPs). It has also a web frontend ...
1
vote
1answer
16 views

Traffic from OpenVPN client to 'self' rejected by UFW

I currently have a single VPS set up with OpenVPN server. My idea behind this setup is that, while developing, I would be connected to server over VPN, which would allow me to access ports on the ...
1
vote
1answer
30 views

Could not bind to additional port for apache via ufw on ubuntu 14.04

I just moved our site to DigitalOcean. Their DNS servers went down. I checked and last time there was a problem involving DNS servers it took 28 hours to fix. We have a consulting gig going at a ...
1
vote
0answers
21 views

OpenVPN connection Time out after connecting to Server

I have set up OpenVPN on my Server and now have problems when connecting to it. As soon as the connection is established I cant use the internet anymore. SSH into the server is still possible. here ...
0
votes
0answers
11 views

UFW blank before.rules file

I am using UFW to configure my Debian IPTables firewall. I have issued the following command... ufw allow ssh This has successfully opened up Port 22 and I can now connect remotely via SSH. I ...
1
vote
0answers
29 views

UFW blocks permitted ports

I use ufw utility to manage my firewall for the system which runs web and mail services. The rules are follow: Status: active To Action From -- ...
0
votes
2answers
77 views

UFW Forwarding on Port 80 to port 3000 on Single VPS [duplicate]

The following is on a Virtual Private Server online and only one machine. I have tried a number of ideas using UFW on Ubuntu 15.10 to forward an incoming request on port 80 to a simple app I have ...
0
votes
1answer
31 views

How to connect to ftp server from within LAN when the router port-forwards external connection away from it

Sorry for the long question. What it means is this: I am managing a small LAN that is protected by a router. router 192.168.1.1 server 192.168.1.9 client 192.168.1.2 client ...
0
votes
1answer
23 views

How do I allow outgoing connections from a service in UFW?

Hey I am using Apache server to power my Python-Flask application. It uses urllib2 which makes outgoing connections requests which are blocked by UFW. How do I allow only Apache to make outgoing ...
0
votes
1answer
42 views

ufw deny from ip doesn't seem to be working

I've been tailing my server's access log while working today, and have noticed one of my client's wordpress sites getting hammered with login attempts from an IP from out of the country. I wanted to ...
3
votes
1answer
30 views

enabling ufw disables some of the settings in sysctl.conf

When I add rules to ufw and then enable it, some of my settings in sysctl.conf become void so I have to do sysctl -p after doing ufw enable. So for example one of my settings in sysctl.conf is to not ...
-1
votes
1answer
101 views

I've installed and enabled ufw firewall, and I cannot connect to my server [closed]

I've installed ufw firewall on my little server, with ssh and web services. But, when enabled, the ssh connection lost, and I could neither connect to the hosted web via web browser. What has ...
3
votes
1answer
30 views

UFW - Rules by Service Versus Port and Protocol

What is the difference between creating allow/deny rules via a service versus a port and protocol? For example: ufw allow ssh versus ufw allow 22/tcp or even, ufw allow ssh/tcp. Which is the 1) ...
5
votes
1answer
77 views

Do I need to open any port for NTP synchronization to work if both outgoing and incoming are blocked on ufw?

One of my production servers, UFW configuration is as follows: Status: active Logging: on (low) Default: deny (incoming), **deny (outgoing)**, disabled (routed) New profiles: skip To ...
0
votes
0answers
26 views

i see an open udp connection on port 50113 on server

I just setup a new server and see an established connection on port 50113 (udp). I do not recall setting up anything on the server that would require port 50113 (tcp or udp). I have ufw/ip tables - ...
1
vote
1answer
58 views

Allow UFW access from IP wildcard

I would like to allow access from IP address based upon wildcards e.g. 64.201.52* How can this be done with UFW? Have tried sudo ufw allow from 64.201.52.*
2
votes
1answer
88 views

How to disable UFW ubuntu externally?

i am using amazon EC2, i enabled UFW in my server and without adding any other rule i logged out. now since there was no rule specified, i am not able to login to ssh and because of it even my website ...
1
vote
1answer
84 views

Timeout error on MariaDB in Docker container

I have an ArchLinux installation with Docker and MariaDB running in a container. Now when I try to connect to the database, I get the following euro: MySQL said: Can't connect to MySQL server on ...
0
votes
1answer
67 views

ufw without connection tracking

I am using ufw on a high traffic webserver (lot of http/https traffic) on ubuntu (12.04 or 14.04). I tried tuning kernel parameters related to connection tracking with some success. However, ...
0
votes
0answers
21 views

How to configure UFW to deny outgoing traffic on all ports except a few ones I specify manually?

Sounds simple but it does not look like it is with UFW. Does anyone know how to do that without having to specify thousands of lines?
0
votes
0answers
6 views

Can not enable ufw in ubuntu VPS 14.04 [duplicate]

When I run following command sudo ufw disable It does not work. Got following errors ERROR: problem running ufw-init modprobe: ERROR: ../libkmod/libkmod.c:507 ...
1
vote
1answer
113 views

Ubuntu 14.04 TCP established hash table entries

A bit of background I am running two servers under high traffic one with ubuntu 12.04 (linux 3.2.0-69-generic) and one with ubuntu 14.04 (linux 3.13.0-52-generic). I am now trying to secure both. ...
0
votes
0answers
171 views

OpenVPN with UFW [ TLS Error: TLS handshake failed ]

I installed Openvpn in my server which already had UFW installed i enabled ip forward in vi /etc/sysctl.conf applied changes using sysctl -p I also enabled forwarding using echo 1 > ...
0
votes
0answers
55 views

Block ipv6 range in UFW

I have a Ubuntu server running UFW as a firewall. Since a couple of days a Chinese ipv6 address keeps scanning my server over and over again. My visitor analytics software shows anonymized ip ...
0
votes
1answer
538 views

Postfix + Dovecot + IMAP SSL: imap-login: Aborted login

Am getting familiar with email Mail Server components and configuration. Knowing that there have been quite a few configuration changes to Dovecot 2.x and willing to use SSL encryption, I have come ...
0
votes
0answers
180 views

UFW Router default deny routed and ufw rules

I have an ubuntu 14.04 server running as my internet gateway in front of a dmz and a second ubuntu 14.04 server running as a router between my dmz and internal subnet, both using ufw in front of ...
1
vote
0answers
261 views

Docker's iptables=false option seems to have not the desired behavior

Good morning at all. I am running Ubuntu 14.04 server and Docker 1.8.1 and UFW is my front-end to manage iptables. I need to run an application into a container. I do need the following behavior: ...
1
vote
1answer
124 views

ufw port forwarding not working

I'm trying to set up an ubuntu 14.04 server as a router that also does some port forwarding. I've got the router part working but cannot for the life of me figure out why the port forwarding isn't ...
0
votes
0answers
128 views

UFW - Set correct kernel params

As every system administrator does, one of the first things i did right after booting up my web server was install ufw and tune/set kernel parameters in /etc/sysctl.conf. By the way, this is my ...
0
votes
1answer
210 views

Forward SSH to OpenVPN client via UFW

I have an Ubuntu 14 server that is running OpenVPN gateway and ufw. Let's call it Server A. I have an IP reservation for a permanently connected server (Server B). It always connects to OpenVPN and ...
1
vote
1answer
73 views

Does order of UFW rules matter?

When I first initialized my ufw, I did ufw default allow outgoing ufw default deny incoming ufw allow 80/tcp ufw allow 22/tcp Over the last week or so, I've been going through my access logs and ...
0
votes
0answers
73 views

UFW blocking open ports until manual reload

I'm having a hard time getting my head around this ufw issue I'm having. Here is the output of ufw status verbose: Status: active Logging: on (low) Default: deny (incoming), allow ...
0
votes
0answers
61 views

UFW insert [number] throws error

Using Ubuntu server 14.04LTS I want to configure my UFW to limit ssh connections with the following command: sudo ufw insert 1 limit ssh/tcp which throws an error: ERROR: Invalid position '1' Due ...
0
votes
0answers
39 views

Forwarding all traffic from port 80 to another IP with ufw

I want that all web traffic (port 80) coming through my server is redirected to another IP (10.0.3.101). I added this code at the end of /etc/ufw/after.rules, but for some reason it is not working. ...
0
votes
0answers
25 views

Setup UFW allow every port from my IP

Is it save to add allow rule to UFW which allow it to connect to every port of my VPS from my own IP (for example 1.2.3.44): To Action From -- ...
-1
votes
1answer
53 views

ufw status (what does the v6 stand for?)

My ufw status output looks like this: To Action From -- ------ ---- 22 ALLOW Anywhere 80/tcp ...
1
vote
1answer
110 views

Blocking illegal traffic to a vps using ufw or/and iptables

I am totally new in this, and I didn't know how to phrase my question title, so it might not be that accurate, forgive me on that matter beforehand. I'm getting some strange requests in my apache ...
9
votes
2answers
792 views

Debugging iptables and common firewall pitfalls?

This is a proposed Canonical Question about understanding and debugging the software firewall on Linux systems. In response to EEAA's answer and @Shog's comment that we need a suitable canonical ...
0
votes
0answers
109 views

UFW not working on Debian while ufw status looks good

The problem is: On a server that has several interfaces, loopback, eth0 with public IP and several Docker virtual interfaces, I wanted to use UFW to deny all of the incoming traffic on eth0 for the ...
0
votes
1answer
24 views

Forwarding over a vpn

I have a group of AWS web servers which will need to get into the business of initiating and speaking TCP over a VPN to a third party. Don't ask me why a VPN is the third party's chosen solution; ...
1
vote
1answer
276 views

How to temporarily open a port in ufw for a specific IP address?

I use ufw (Uncomplicated Firewall) on my web server. Right now I have it set up to allow SSH to the world and fail2ban to prevent massive sign in attempts. The web server has ports 80 and 443 open. ...
0
votes
1answer
374 views

ipTables IP Range will not be blocked

I have setup fail2ban with this Tutorial http://wireflare.com/permanently-ban-repeat-offenders-with-fail2ban/ and it seems working. But the attackers are changing their IPs and thats why I decided to ...
0
votes
1answer
77 views

How to extract IP addresses from log?

I'd like to gather information from UFW service, for further analysis. A typical UFW log entry looks like the following: [UFW BLOCK] IN=eth0 OUT= MAC=99:99:99:99:99:99:99:XX:XX:XX:XX:99:99:99 ...
0
votes
1answer
290 views

UFW allow outbound from ip address, deny from others

I am trying to allow outbound connections from a specific IP address and deny outbound from all other ip addreses on port 80, but can't seem to crack it: These are the commands: ufw deny out 80 ufw ...
4
votes
2answers
5k views

How to make netstat on Linux only show OUTBOUND tcp connections?

My ubuntu server is infected and there is a process making a bunch of HTTP requests to a bunch of websites (sucks!). I have added the following to my firewall (UFW): sudo ufw deny out proto tcp to ...
2
votes
1answer
264 views

UFW rules in place and enabled yet traffic still allowed

I have UFW configured to try and block some unwanted IPs and associated requests. #ufw status |less Status: active To Action From -- ------ ...