0
votes
1answer
43 views

How do I test my firewall rules?

I've setup some rules in ufw and I've turned it on. Now I want to ensure my rules actually block traffic. However, when running nmap -PN -p <my_port> <ip> from my local workstation it ...
0
votes
1answer
86 views

Why does the DOCKER chain show in `ufw raw` but not using `iptables -L`

If I run sudo ufw raw, I can see an iptables chain called 'DOCKER': Chain DOCKER (2 references) pkts bytes target prot opt in out source destination 0 0 DNAT ...
0
votes
2answers
368 views

telnet connection refused despite ufw having ports open [closed]

How is this possible? I dont understand Server A ip=111.111.111.111 Server B ip=222.222.222.222 Server A: ufw status 23 ALLOW 222.222.222.222 9160 ...
0
votes
1answer
34 views

ufw instead of pure iptables

I am running an Ubuntu server VPS that several people with varying networking skills need to manage. Currently the server is protected by iptables. I am considering using ufw to gain simplicity. What ...
1
vote
3answers
290 views

Is this a security breach?

I have a server running Ubuntu 10.04LTS (I know it is too old), which over the last couple of weeks has on occasion been unresponsive to network traffic, and needed a hard reset first thing in the ...
1
vote
3answers
217 views

Locking down my Ubuntu server with UFW [duplicate]

I'm using Ubuntu 12.04 on an Amazon EC2 instance and new to the sysadmin side of things. I'm working on a little project of my own and I'm already starting to get targeted by bots (at least I hope ...
1
vote
1answer
145 views

iptables DNAT port forward to another machine on LAN

I am trying to implement iptables forwarding rules in order to internally redirect packets coming through a specific port. My machine is running under the distribution Ubuntu Server 12.04.3, with UFW ...
1
vote
0answers
161 views

Using ufw on OpenVZ-based VPSes

I'm facing with a problem to set up ufw on Ubuntu 12.04 running on an OpenVZ-based VPS. I know there is limitations for ufw. I googled a bunch of articles how to resolve the issue (like: ...
1
vote
1answer
59 views

Setting up ufw without locking yourself out

Basically I want to protect a Ubuntu server with a firewall and sided for ufw. The big problem is that I don't have physical access to the server, neither is it possible to force a reboot or revert to ...
0
votes
1answer
210 views

Incoming traceroute blocked by ufw

One of my Proxmox VMs running Ubuntu 13.04 won't accept incoming trace routes while ufw is enabled. What command do give ufw to allow incoming traceroute(6)s? The following shows up in the syslog ...
-1
votes
1answer
89 views

Trouble configuring sendmail to relay mail [duplicate]

I am trying to configure sendmail and ufw on an ubuntu server (ServerA) so that another server (ServerB) can send mail through it. In my /etc/mail/access file I have the following line (a.b.c.d is the ...
0
votes
0answers
78 views

UFW : NAT with source + destination on loopback interface

I want to do a simple redirect , port 80 to 8080. I have a rule that works when the connection comes from eth0. But when I want to test the rule from localhost, it is not working. Did I miss some ...
0
votes
1answer
72 views

Ubuntu UFW firewall turns itself off

I have UFW enabled on my server. However, I find that it is disabled at times, showing a status of "firewall not loaded". I enable it, verify that it is running (shows loaded and gives me a list of my ...
0
votes
1answer
146 views

How can I un-firewall port 80 on AWS Ubuntu Raring?

I have a web server I'm trying to make accessible, and although from the command line I get a connection by typing telnet localhost 80, it refuses nonlocal connections. The server is an AWS EC2 node, ...
1
vote
1answer
211 views

UFW - can I add a domain?

This will work fro the docs: sudo ufw allow proto tcp from 192.168.0.2 to any port 22 But..will this work? sudo ufw allow proto tcp from foo.bar.com to any port 22 I am using ubuntu 12.04
2
votes
1answer
1k views

Where are the logs for ufw located on Ubuntu Server?

I have an Ubuntu server where I am blocking some IPs with ufw. I enabled logging, but I don't know where to find the logs. Where might the logs be or why might ufw not be logging?
1
vote
3answers
286 views

Testing the limits of UFW with thousands of deny blocks

Here's the deal: I have a persistent Chinese botnet that spams my forum (running on an Ubuntu 12.04.2 server on nginx, etc). I've been using UFW (Ubuntu's "Uncomplicated FireWall") for managing the ...
0
votes
1answer
248 views

Allowing access to redis port for only specific servers with ufw

I've installed ufw on my Ubuntu 10.04 server. The only thing running on that server is going to be ElasticSearch and Redis. Redis uses port 6379. I only want two different IPs to be able to access the ...
0
votes
1answer
203 views

Unknown UDP trafic on fresh Ubuntu 12.04 install

I do configure ufw to deny outgoing trafic by default. On a fresh Ubuntu 12.04 install, I always get some random-like UDP trafic. I am curious to what generates this & how should I allow it (if I ...
1
vote
1answer
458 views

UFW Firewall Rules ordering?

I have the following rules on our server within UFW: To Action From -- ------ ---- 22 ALLOW 217.22.12.111 22 ...
2
votes
1answer
133 views

Cannot directly reject traffic on port 25

My server is running Ubuntu 10.04.4 LTS and I want to reject traffic to port 25. The goal is this: $ telnet {ip} 25 Trying {ip}... telnet: connect to address {ip}: Connection refused telnet: Unable ...
0
votes
2answers
692 views

ufw blocking apt

I have the same Problem as described here, but the given solution doesnt work for me: ufw blocking apt and dns When I add the rule ufw deny out to any, and add the port 80, 443/tcp, ssh-port as ...
1
vote
1answer
112 views

In ufw is there any way to disable logging for a particular rule?

I am using UFW with a default logging policy of "low". I would like to keep this logging on for the default deny action, but disable it for a particular IP address only. So I'd like to create one ...
1
vote
0answers
113 views

Ubuntu Server UFW NAT Issues

*nat :POSTROUTING ACCEPT [0:0] -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE -A ufw-before-input -i tun0 -j ACCEPT -A ufw-before-output -i tun0 -j ACCEPT -A ufw-before-forward -s 10.8.0.0/24 -j ...
-2
votes
1answer
581 views

Restrict traffic to local network and VPN using ufw or iptables

I want to restrict all traffic from my ubuntu-machine to come or go from the local network (eth0) or from or to my VPN (tun0). It should be possible to connect the router in the local network but not ...
0
votes
1answer
834 views

Ubuntu IP Forwarding to virtual ethernet adapter

I've setup Ubuntu server along with ufw as a firewall. To start, I have two networks: Public: 66.xxx.xxx.70 - 66.xxx.xxx.78 Private: 192.168.3.1 - 192.168.3.255 My network config: auto eth0 iface ...
0
votes
0answers
214 views

Ubuntu and uwf - ERROR: '/lib/ufw/user.rules' is not writable

Every time I try and update a rule I get this error. # sudo ufw allow from 111.111.111.111 sudo: unable to resolve host myserver ERROR: '/lib/ufw/user.rules' is not writable How do I resolve?
0
votes
2answers
958 views

Configure ufw to redirect http traffic to another IP

I'm trying to redirect all HTTP/HTTPS trafic from one server to another (via IP). I do use the ufw firewall. How can I configure it do to so?
0
votes
1answer
660 views

squid, ufw and iptables

I have a Ubuntu box with Squid installed acting as a transparent proxy server. The config which does the magic is the following. (eth0 is external interface and eth1 is internal.) sudo sh -c 'echo 1 ...
3
votes
2answers
3k views

Opening port 5432 on ubuntu

I am trying to open port 5432 on ubuntu using ufw using sudo ufw allow 5432/tcp I then use nmap to see if port 5432 was opened and i get this: root@domain:~# sudo nmap -sS -O 127.0.0.1 Starting ...
2
votes
1answer
278 views

Recommended ufw port configuration to secure tomcat web-application ubuntu server?

Assuming an ubuntu server operating web applications on Tomcat (with redirection from apache 80 to 8080). What is the recommended port configuration to secure the server? Thanks. P.S.: I would like ...
2
votes
1answer
323 views

Can ufw on a kvm host restrict traffic to guests?

I've set up a number of guests running on kvm on Ubuntu. Network access for the guests is via network bridge with br0 sitting on top of eth0. I have ufw running on the host machine and this is ...
1
vote
1answer
503 views

Redirect traffic from a single domain to another webserver using Bind9 and ufw

I have a DNS server setup with Bind9 and ufw as the firewall. ufw forwards all web traffic to our web server however I would like to redirect one domain to a different server. Example Servers DNS ...
3
votes
1answer
2k views

Turning on UFW stops my e-mail client functioning (both imap and smtp) even though they are allowed?

I am using ubuntu 10.04 on a VPS. Without enabling UFW everythign works fine - imap using port 143. And sends emails using smtp port 587. However, when I turn on UFW a lot of problems are ...
1
vote
1answer
530 views

setting up ufw for a website, I want to to disallow everything except ssh, e-mail, and http

I have read the basic instructions here: https://help.ubuntu.com/community/UFW I want to sudo ufw default deny and then sudo ufw allow ssh sudo ufw allow smtp sudo ufw allow www sudo ufw allow ...
1
vote
1answer
678 views

SSH freeze when UFW is enabled

I have a small Ubuntu 10.10 server and i recently noticed a weird behavior (not sure if it was happening before). If I have ufw enabled (with default deny all in, allow all out, allow all http, allow ...
4
votes
2answers
5k views

Ubuntu ufw: set a rule on a per interface basis

I want to create a rule that allows anyone on eth1 to access port 80. Can UFW do this or should I go back to using Shorewall? To clarify: this is a capabilties question, can ufw handle interfaces as ...
1
vote
0answers
2k views

ufw deny all incoming and outgoing not working!

I'm sure I'm doing something wrong. I'm expecting my current rules of "denying all incoming/outgoing" to cripple anything network related, but it's not. First, I did: sudo ufw default deny incoming ...
3
votes
1answer
1k views

Should I be using iptables or ufw?

I know of iptables. I know of ufw. I've been using ufw in the past just because it's easier to setup and use. However, which one should I be using? Is iptables more secure? Is ufw more stable? I ...
1
vote
3answers
2k views

what's wrong with my ufw configuration on Ubuntu server?

I've setup the ufw firewall for my Ubuntu server on linode as follows: Note that this is in the Lish terminal, unfortunately as soon as I turn on the ufw, I cannot: view my test website via port ...
2
votes
1answer
1k views

Ubuntu: How to add an iptables rule that UFW can't create

UFW is working really well for me except in the cases where it doesn't... I want to be able to add another rule manually that will be applied on boot? where should i put this rule? how should I ...
1
vote
1answer
744 views

configuring two network interfaces in ubuntu 10.04.1

I have got two NICs configured on a VM - each is tied to a specific network, one is a DMZ, the other is an internal network. I want MySQL to listen on the internal network only and Apache on the DMZ ...
1
vote
2answers
310 views

The most efficient way to setup MySQL on Ubuntu Server 10 LTS?

This question was originally on stackoverflow.com, but I was told I may get a better answer on this site... Very soon I will setting up a web server for a client who has a very busy site. He has a ...
3
votes
2answers
3k views

Correctly setting up UFW on Ubuntu Server 10 LTS which has Nginx, FastCGI and MySQL?

I'm wanting to get my firewall on my new webserver to be as secure as it needs to be. After I did research for iptables, I came across UFW (Uncomplicated FireWall). This looks like a better way for me ...
0
votes
1answer
5k views

How to allow outbound traffic with UFW?

Ubuntu 10.04 | VPS Hi guys, I'm setting up a VPS server running Ubuntu 10.04 and I presently just want to allow ssh. I thought the following ufw commands would work... ufw default deny ufw allow ...
3
votes
1answer
3k views

Depend on a resource only if it exists in Puppet

I have a class for enabling firewall on nodes (using ufw, in Ubuntu): class ufw { package { ["ufw"]: ensure => latest } exec { "enable-firewall": command => "/usr/bin/yes | ...
0
votes
2answers
2k views

NAT problem with UFW

I'm trying to setup up an Ubuntu server, and first I want it to act as NAT/router/firewall. My question is: How do I make it so the computers connected to the LAN, can access Internet? eth0 Link ...
1
vote
1answer
4k views

UFW on Ubuntu to Allow All Traffic on LAN

I want to allow all LAN traffic to my Ubuntu server. I have read the documentation and see the command, but when I try to edit the command for my IP range I get an error. How can I allow all traffic ...
1
vote
3answers
584 views

Upgrading to ufw on Ubuntu 9.04

I've recently upgrade my Ubuntu server install to 9.04. I'd like to install and use ufw. Is there a way to import my existing iptables into ufw? I'm worried about switching it on, and having all my ...
1
vote
3answers
1k views

Disable connection tracking with UFW for port 80

During load testing my server is dropping packets due to "connection tracking" way before it's running out of resources. I'm using Ubuntu Jaunty with ufw. In my syslog I get: ip_conntrack: table ...