Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

5
votes
2answers
11k views

opening port 80 on Ubuntu AWS

I'm running a tomcat server on an ubuntu machine hosted in an AWS instance. I can reach the server via public_ip:8080 but when i change the listening port on server.xml from 8080 to 80 connection is ...
1
vote
3answers
545 views

Locking down my Ubuntu server with UFW [duplicate]

I'm using Ubuntu 12.04 on an Amazon EC2 instance and new to the sysadmin side of things. I'm working on a little project of my own and I'm already starting to get targeted by bots (at least I hope ...
1
vote
1answer
446 views

iptables DNAT port forward to another machine on LAN

I am trying to implement iptables forwarding rules in order to internally redirect packets coming through a specific port. My machine is running under the distribution Ubuntu Server 12.04.3, with UFW ...
2
votes
0answers
370 views

Using ufw on OpenVZ-based VPSes

I'm facing with a problem to set up ufw on Ubuntu 12.04 running on an OpenVZ-based VPS. I know there is limitations for ufw. I googled a bunch of articles how to resolve the issue (like: ...
1
vote
1answer
93 views

Setting up ufw without locking yourself out

Basically I want to protect a Ubuntu server with a firewall and sided for ufw. The big problem is that I don't have physical access to the server, neither is it possible to force a reboot or revert to ...
0
votes
1answer
122 views

Limit HTTP method on ubuntu 12.04 server

For starters, this is not a web server. I would like to allow or deny HTTP methods on various ports on the server itself. Ideally could write rules like UFW only extended to include the HTTP method ...
0
votes
1answer
558 views

Incoming traceroute blocked by ufw

One of my Proxmox VMs running Ubuntu 13.04 won't accept incoming trace routes while ufw is enabled. What command do give ufw to allow incoming traceroute(6)s? The following shows up in the syslog ...
-1
votes
1answer
167 views

Trouble configuring sendmail to relay mail [duplicate]

I am trying to configure sendmail and ufw on an ubuntu server (ServerA) so that another server (ServerB) can send mail through it. In my /etc/mail/access file I have the following line (a.b.c.d is the ...
0
votes
1answer
409 views

Adding a custom SSH port to Ubuntu 12.04 LTS through UFW

I am trying to configure a Ubuntu 12.04 based VPS and I have changed my ssh port from 22 to 803 and everything worked fine. After this I've installed UFW and now I can't login using SSH. Before I ...
-1
votes
1answer
543 views

UFW rules for specific host / dynamic dns

How can I setup UFW (Uncomplicated Firewall) to add rules for specific hosts? Eg. I want to allow SSH only from yourpc.no-ip.org?
1
vote
1answer
90 views

Is there an iptables-apply equivalent for ufw

I just came upon iptables-apply, which applies an iptables ruleset and lets the user confirm that everything is working correctly before finally committing the changes. If the user does not confirm ...
0
votes
1answer
563 views

Why is UFW blocking some allowed internal connections?

My set up is this: Server 1 (192.168.1.1) - nginx (load balance) - Ubuntu 12.04 LTS Server 2 - uwsgi - Debian 7.1 Server 3 - uwsgi - Debian 7.1 UFW on server 2 and server 3, is blocking ...
1
vote
0answers
197 views

Strange dropped packets coming from port 8888 and with ACK or ACK+PSH set

Background During an incident on a small privative network (1 router/FW + 1 server) my server got accidentally exposed to the internet. Fortunately it was protected by it's own UFW to allow only 1 ...
1
vote
1answer
554 views

Amazon EC2 Servers with syslog-ng communication

I have 3 Amazon EC instances with ubuntu 12.04 Production Server (LAMP Server w/o MYSQL, syslog-ng client) Development Server (LAMP w/ MYSQL, syslog-ng client) Logging Server (syslog-ng Server) I ...
0
votes
2answers
143 views

Ubuntu UFW firewall turns itself off

I have UFW enabled on my server. However, I find that it is disabled at times, showing a status of "firewall not loaded". I enable it, verify that it is running (shows loaded and gives me a list of my ...
0
votes
1answer
521 views

How can I un-firewall port 80 on AWS Ubuntu Raring?

I have a web server I'm trying to make accessible, and although from the command line I get a connection by typing telnet localhost 80, it refuses nonlocal connections. The server is an AWS EC2 node, ...
2
votes
1answer
587 views

UFW - can I add a domain?

This will work fro the docs: sudo ufw allow proto tcp from 192.168.0.2 to any port 22 But..will this work? sudo ufw allow proto tcp from foo.bar.com to any port 22 I am using ubuntu 12.04
0
votes
1answer
446 views

Translating IPTables rule to UFW

we are using an Ubuntu 12.04 x64 LTS VPS. Firewall being used is UFW. I have setup a Varnish + LEMP setup. along with other things, including an Openswan IPSEC VPN from our office to the VPS data ...
0
votes
1answer
28 views

Installation issue in Ubuntu

i wanted to install ufw in my ubuntu 10.04. but, when i try to instal ufw the apt-get installer stalls my progress by trying too install my-sql server, which i dont want to install right now. Is ...
6
votes
1answer
4k views

Where are the logs for ufw located on Ubuntu Server?

I have an Ubuntu server where I am blocking some IPs with ufw. I enabled logging, but I don't know where to find the logs. Where might the logs be or why might ufw not be logging?
3
votes
2answers
286 views

Which UFW messages can logcheck safely ignore?

Logcheck currently sends lots of emails with messages like this Jun 6 19:31:44 <hostname> kernel: [UFW BLOCK] IN=eth0 OUT= MAC=<mac-address> SRC=<source-ip> ...
-1
votes
1answer
291 views

Linux server not routing my packets

I have a linux server (Ubuntu 12) with 2 NIC's. eth0 is connected WAN (inet 10.0.2.15 mask 255.255.255.0) eth1 is connected LAN (inet 192.168.0.1 mask 255.255.255.0) I want my windows machine to ...
1
vote
1answer
226 views

Blocking a service to countries with UFW

I am using UFW trying to block SSH access from multiple countries. I have been successful completely blocking access but I need a refinement: The server needs to allow world access to other services ...
1
vote
3answers
742 views

Testing the limits of UFW with thousands of deny blocks

Here's the deal: I have a persistent Chinese botnet that spams my forum (running on an Ubuntu 12.04.2 server on nginx, etc). I've been using UFW (Ubuntu's "Uncomplicated FireWall") for managing the ...
1
vote
1answer
631 views

Allowing access to redis port for only specific servers with ufw

I've installed ufw on my Ubuntu 10.04 server. The only thing running on that server is going to be ElasticSearch and Redis. Redis uses port 6379. I only want two different IPs to be able to access the ...
0
votes
1answer
261 views

Unknown UDP trafic on fresh Ubuntu 12.04 install

I do configure ufw to deny outgoing trafic by default. On a fresh Ubuntu 12.04 install, I always get some random-like UDP trafic. I am curious to what generates this & how should I allow it (if I ...
2
votes
1answer
2k views

UFW Firewall Rules ordering?

I have the following rules on our server within UFW: To Action From -- ------ ---- 22 ALLOW 217.22.12.111 22 ...
12
votes
4answers
7k views

Where does UFW (uncomplicated firewall) save command-line rules to?

You add a rule like this: ufw allow 22/tcp The rule is saved, and is applied even after reboot. But it's not written anywhere in /etc/ufw. Where is it saved to? (Ubuntu, using ufw as ...
1
vote
1answer
738 views

nginx or port 80 unreachable

After some server hardening, and installing NGINX (whitout modifying the configuration) I somehow cant access nginx from outside anymore. Sadly, I'm not at all an expert in theese things. The ...
0
votes
1answer
890 views

Deny from localhost with ufw

I have a service running on port 1339. Is it possible to deny requests from localhost to this port? Currently I have an ufw rule to allow requests from a specified IP but localhost can access the port ...
2
votes
1answer
160 views

Cannot directly reject traffic on port 25

My server is running Ubuntu 10.04.4 LTS and I want to reject traffic to port 25. The goal is this: $ telnet {ip} 25 Trying {ip}... telnet: connect to address {ip}: Connection refused telnet: Unable ...
0
votes
2answers
1k views

ufw blocking apt

I have the same Problem as described here, but the given solution doesnt work for me: ufw blocking apt and dns When I add the rule ufw deny out to any, and add the port 80, 443/tcp, ssh-port as ...
3
votes
1answer
664 views

Ubuntu Server 12.04: How does one configure the firewall during installation?

I'm following instructions to automate the installation of Ubuntu Server 12.04 using kickstart. It works well for automatically partitioning the drives, selecting languages etc. However, it doesn't ...
1
vote
0answers
730 views

How does one configure UFW to allow private DNS requests, but block DNS requests from internet

I have an Ubuntu Server 12.04, with two network cards: eth0 is connected to the internet eth1 is connected to a private network (192.168.10.1) The server is configured as a gateway and hosts DNS ...
1
vote
1answer
3k views

UFW: force traffic thru OpenVPN tunnel / do not leak any traffic

I have VPN access using OpenVPN and try to create a safe machine that does not leak traffic over non-VPN interfaces. Using the firewall UFW I try to achieve the following: Allow Access from LAN to ...
1
vote
0answers
262 views

UFW blocks SSL connections Varnish/Apache2 on Ubuntu 12.04

I have installed Virtualmin on a Ubuntu 12.04 server and I'm using LAMP stack with Varnish (:80) in front of Apache (:8000). However, I cannot access https when UFW is enabled. When I disable UFW, all ...
2
votes
1answer
172 views

In ufw is there any way to disable logging for a particular rule?

I am using UFW with a default logging policy of "low". I would like to keep this logging on for the default deny action, but disable it for a particular IP address only. So I'd like to create one ...
3
votes
1answer
1k views

How to place a virtual machine in DMZ?

I have an Ubuntu 12.04 server running few virtual machines with KVM. I would like to expose some of these virtual machines on the internet, to make it possible for customers to test the products ...
1
vote
0answers
130 views

Ubuntu Server UFW NAT Issues

*nat :POSTROUTING ACCEPT [0:0] -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE -A ufw-before-input -i tun0 -j ACCEPT -A ufw-before-output -i tun0 -j ACCEPT -A ufw-before-forward -s 10.8.0.0/24 -j ...
3
votes
1answer
293 views

UFW: Disable logging of blocks due to optional FIN/ACK message being received

I've recently built a server and decided to use UFW for the first time. I was investigating a possible connection issue (turns out it was their end) but I noticed that the logs are full of entries ...
-2
votes
1answer
825 views

Restrict traffic to local network and VPN using ufw or iptables

I want to restrict all traffic from my ubuntu-machine to come or go from the local network (eth0) or from or to my VPN (tun0). It should be possible to connect the router in the local network but not ...
1
vote
2answers
2k views

How To Set iptables log rules for PSAD with UFW?

For PSAD to work, I need to add the following iptables rules and enable packet logging : iptables -A INPUT -j LOG iptables -A FORWARD -j LOG ip6tables -A INPUT -j LOG ip6tables -A FORWARD -j LOG I ...
1
vote
2answers
1k views

Cant forward port 443 to 8443 without allowing 8443 on ufw

I configured port forwarding through iptables and ufw. But there is something I do not understand, I just cant get iptables to forward port 443 to 8443 without allowing port 8443 on UFW. I want port ...
0
votes
1answer
1k views

Ubuntu IP Forwarding to virtual ethernet adapter

I've setup Ubuntu server along with ufw as a firewall. To start, I have two networks: Public: 66.xxx.xxx.70 - 66.xxx.xxx.78 Private: 192.168.3.1 - 192.168.3.255 My network config: auto eth0 iface ...
5
votes
3answers
2k views

ufw blocking apt and dns

I installed ufw on my Debian system like the following: # aptitude install ufw # ufw limit 22 # ufw allow 80 # ufw allow 443 # ufw enable # ufw status verbose Status: active Logging: on (low) ...
1
vote
2answers
2k views

Configure ufw to redirect http traffic to another IP

I'm trying to redirect all HTTP/HTTPS trafic from one server to another (via IP). I do use the ufw firewall. How can I configure it do to so?
1
vote
1answer
2k views

How to use ufw to allow ip access by ranges

I am using a datacenter in Hong Kong (clould provider). I have monitoring servers in tokyo and I am using uwf for ubuntu 64 12.04 to limit access. I have never used ip tables, only ufw. My rules on ...
5
votes
1answer
298 views

What's the effect of iptables/ufw deny filters on server load?

I'm wondering how scalable it is to add IP addresses or subranges I want to block into ufw. E.g., I do this whenever I discover a particularly bad bot or server farm. As my list grows, I wonder how ...
0
votes
1answer
122 views

webserver behind router or switch, multiple IPs available

We are getting a new internet connection 100Mbps UP/DOWN and 4 Static IPs. Also on that connection there will be a webserver that hosts some websites for us. (Nothing too fancy). The problem where ...
1
vote
2answers
621 views

Firewall blocking some strange communications from source-port 22 to over-seas ip addresses. Should I be concerned?

I'm responsible for a server that serves a single service (ssh) over the internet via port-forwarding through a firewall. The ssh service login is limited to encryption-key only (no passwords ...