Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

1
vote
1answer
151 views

Something (but not iptables) mysteriously redirects network traffic - how to diagnose?

Summary There is a virtualbox host (1.1.1.5) and a routed guest (1.1.1.6). Something redirects any traffic on port 25 with the guest, whether ingoing or outgoing, to 1.1.1.5 port 2525 and I cannot ...
0
votes
2answers
5k views

telnet connection refused despite ufw having ports open [closed]

How is this possible? I dont understand Server A ip=111.111.111.111 Server B ip=222.222.222.222 Server A: ufw status 23 ALLOW 222.222.222.222 9160 ...
0
votes
1answer
286 views

Iptables/ufw - blocking ports when using nat

I use NAT to move requests from external ports to an internal ip address and port hosted with proxmox. Something like this: iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 8000 -j DNAT --to ...
0
votes
1answer
92 views

ufw instead of pure iptables

I am running an Ubuntu server VPS that several people with varying networking skills need to manage. Currently the server is protected by iptables. I am considering using ufw to gain simplicity. What ...
1
vote
0answers
284 views

strongswan packet get natted when ufw is enabled

I'm using strongswan 4.6.4 to connect road warriors to my server (ubuntu 13.10), which is natted behind a firewall. left=%defaultroute leftsubnet=10.10.1.0/24 right=%any rightsubnet=...
1
vote
1answer
2k views

Locked myself out of SSH with UFW

I had my server set up to accept SSH connections on port 21966, I followed some steps to configure ufw however it has now locked me out of all SSH access on any port! I've been able to boot my ...
1
vote
3answers
1k views

Testing the limits of UFW with thousands of deny blocks

Here's the deal: I have a persistent Chinese botnet that spams my forum (running on an Ubuntu 12.04.2 server on nginx, etc). I've been using UFW (Ubuntu's "Uncomplicated FireWall") for managing the ...
1
vote
3answers
713 views

Is this a security breach?

I have a server running Ubuntu 10.04LTS (I know it is too old), which over the last couple of weeks has on occasion been unresponsive to network traffic, and needed a hard reset first thing in the ...
1
vote
3answers
748 views

Locking down my Ubuntu server with UFW [duplicate]

I'm using Ubuntu 12.04 on an Amazon EC2 instance and new to the sysadmin side of things. I'm working on a little project of my own and I'm already starting to get targeted by bots (at least I hope ...
1
vote
1answer
622 views

iptables DNAT port forward to another machine on LAN

I am trying to implement iptables forwarding rules in order to internally redirect packets coming through a specific port. My machine is running under the distribution Ubuntu Server 12.04.3, with UFW ...
0
votes
1answer
6k views

How to allow outbound traffic with UFW?

Ubuntu 10.04 | VPS Hi guys, I'm setting up a VPS server running Ubuntu 10.04 and I presently just want to allow ssh. I thought the following ufw commands would work... ufw default deny ufw allow ...
2
votes
0answers
488 views

Using ufw on OpenVZ-based VPSes

I'm facing with a problem to set up ufw on Ubuntu 12.04 running on an OpenVZ-based VPS. I know there is limitations for ufw. I googled a bunch of articles how to resolve the issue (like: http://blog....
1
vote
1answer
113 views

Setting up ufw without locking yourself out

Basically I want to protect a Ubuntu server with a firewall and sided for ufw. The big problem is that I don't have physical access to the server, neither is it possible to force a reboot or revert to ...
0
votes
1answer
137 views

Limit HTTP method on ubuntu 12.04 server

For starters, this is not a web server. I would like to allow or deny HTTP methods on various ports on the server itself. Ideally could write rules like UFW only extended to include the HTTP method ...
0
votes
1answer
808 views

Incoming traceroute blocked by ufw

One of my Proxmox VMs running Ubuntu 13.04 won't accept incoming trace routes while ufw is enabled. What command do give ufw to allow incoming traceroute(6)s? The following shows up in the syslog ...
-1
votes
1answer
221 views

Trouble configuring sendmail to relay mail [duplicate]

I am trying to configure sendmail and ufw on an ubuntu server (ServerA) so that another server (ServerB) can send mail through it. In my /etc/mail/access file I have the following line (a.b.c.d is the ...
1
vote
1answer
4k views

UFW: force traffic thru OpenVPN tunnel / do not leak any traffic

I have VPN access using OpenVPN and try to create a safe machine that does not leak traffic over non-VPN interfaces. Using the firewall UFW I try to achieve the following: Allow Access from LAN to ...
0
votes
1answer
495 views

Adding a custom SSH port to Ubuntu 12.04 LTS through UFW

I am trying to configure a Ubuntu 12.04 based VPS and I have changed my ssh port from 22 to 803 and everything worked fine. After this I've installed UFW and now I can't login using SSH. Before I ...
-1
votes
1answer
1k views

UFW rules for specific host / dynamic dns

How can I setup UFW (Uncomplicated Firewall) to add rules for specific hosts? Eg. I want to allow SSH only from yourpc.no-ip.org?
1
vote
1answer
105 views

Is there an iptables-apply equivalent for ufw

I just came upon iptables-apply, which applies an iptables ruleset and lets the user confirm that everything is working correctly before finally committing the changes. If the user does not confirm ...
4
votes
2answers
4k views

Correctly setting up UFW on Ubuntu Server 10 LTS which has Nginx, FastCGI and MySQL?

I'm wanting to get my firewall on my new webserver to be as secure as it needs to be. After I did research for iptables, I came across UFW (Uncomplicated FireWall). This looks like a better way for me ...
0
votes
1answer
760 views

Why is UFW blocking some allowed internal connections?

My set up is this: Server 1 (192.168.1.1) - nginx (load balance) - Ubuntu 12.04 LTS Server 2 - uwsgi - Debian 7.1 Server 3 - uwsgi - Debian 7.1 UFW on server 2 and server 3, is blocking ...
1
vote
0answers
251 views

Strange dropped packets coming from port 8888 and with ACK or ACK+PSH set

Background During an incident on a small privative network (1 router/FW + 1 server) my server got accidentally exposed to the internet. Fortunately it was protected by it's own UFW to allow only 1 ...
4
votes
1answer
1k views

Cannot loopback to localhost php gateway causing nginx to timeout while setting up firewall with ufw

I'm setting up ufw for the first time. Using Ubuntu 10.04 LTS on an OpenVZ VPN and have the following rules: sudo ufw allow 22/tcp sudo ufw allow 25/tcp sudo ufw allow 53 sudo ufw allow 80 sudo ufw ...
1
vote
1answer
671 views

Amazon EC2 Servers with syslog-ng communication

I have 3 Amazon EC instances with ubuntu 12.04 Production Server (LAMP Server w/o MYSQL, syslog-ng client) Development Server (LAMP w/ MYSQL, syslog-ng client) Logging Server (syslog-ng Server) I ...
0
votes
1answer
757 views

How can I un-firewall port 80 on AWS Ubuntu Raring?

I have a web server I'm trying to make accessible, and although from the command line I get a connection by typing telnet localhost 80, it refuses nonlocal connections. The server is an AWS EC2 node, ...
2
votes
1answer
1k views

UFW - can I add a domain?

This will work fro the docs: sudo ufw allow proto tcp from 192.168.0.2 to any port 22 But..will this work? sudo ufw allow proto tcp from foo.bar.com to any port 22 I am using ubuntu 12.04
0
votes
1answer
652 views

Translating IPTables rule to UFW

we are using an Ubuntu 12.04 x64 LTS VPS. Firewall being used is UFW. I have setup a Varnish + LEMP setup. along with other things, including an Openswan IPSEC VPN from our office to the VPS data ...
3
votes
2answers
347 views

Which UFW messages can logcheck safely ignore?

Logcheck currently sends lots of emails with messages like this Jun 6 19:31:44 <hostname> kernel: [UFW BLOCK] IN=eth0 OUT= MAC=<mac-address> SRC=<source-ip> DST=<destination-ip&...
0
votes
1answer
28 views

Installation issue in Ubuntu

i wanted to install ufw in my ubuntu 10.04. but, when i try to instal ufw the apt-get installer stalls my progress by trying too install my-sql server, which i dont want to install right now. Is ...
12
votes
1answer
9k views

Where are the logs for ufw located on Ubuntu Server?

I have an Ubuntu server where I am blocking some IPs with ufw. I enabled logging, but I don't know where to find the logs. Where might the logs be or why might ufw not be logging?
-1
votes
1answer
494 views

Linux server not routing my packets

I have a linux server (Ubuntu 12) with 2 NIC's. eth0 is connected WAN (inet 10.0.2.15 mask 255.255.255.0) eth1 is connected LAN (inet 192.168.0.1 mask 255.255.255.0) I want my windows machine to ...
1
vote
1answer
306 views

Blocking a service to countries with UFW

I am using UFW trying to block SSH access from multiple countries. I have been successful completely blocking access but I need a refinement: The server needs to allow world access to other services (...
1
vote
1answer
1k views

Allowing access to redis port for only specific servers with ufw

I've installed ufw on my Ubuntu 10.04 server. The only thing running on that server is going to be ElasticSearch and Redis. Redis uses port 6379. I only want two different IPs to be able to access the ...
0
votes
1answer
298 views

Unknown UDP trafic on fresh Ubuntu 12.04 install

I do configure ufw to deny outgoing trafic by default. On a fresh Ubuntu 12.04 install, I always get some random-like UDP trafic. I am curious to what generates this & how should I allow it (if I ...
1
vote
1answer
1k views

nginx or port 80 unreachable

After some server hardening, and installing NGINX (whitout modifying the configuration) I somehow cant access nginx from outside anymore. Sadly, I'm not at all an expert in theese things. The ...
0
votes
1answer
2k views

Deny from localhost with ufw

I have a service running on port 1339. Is it possible to deny requests from localhost to this port? Currently I have an ufw rule to allow requests from a specified IP but localhost can access the port ...
2
votes
1answer
178 views

Cannot directly reject traffic on port 25

My server is running Ubuntu 10.04.4 LTS and I want to reject traffic to port 25. The goal is this: $ telnet {ip} 25 Trying {ip}... telnet: connect to address {ip}: Connection refused telnet: Unable ...
3
votes
1answer
711 views

Ubuntu Server 12.04: How does one configure the firewall during installation?

I'm following instructions to automate the installation of Ubuntu Server 12.04 using kickstart. It works well for automatically partitioning the drives, selecting languages etc. However, it doesn't ...
1
vote
0answers
321 views

UFW blocks SSL connections Varnish/Apache2 on Ubuntu 12.04

I have installed Virtualmin on a Ubuntu 12.04 server and I'm using LAMP stack with Varnish (:80) in front of Apache (:8000). However, I cannot access https when UFW is enabled. When I disable UFW, all ...
2
votes
1answer
230 views

In ufw is there any way to disable logging for a particular rule?

I am using UFW with a default logging policy of "low". I would like to keep this logging on for the default deny action, but disable it for a particular IP address only. So I'd like to create one ...
3
votes
1answer
1k views

How to place a virtual machine in DMZ?

I have an Ubuntu 12.04 server running few virtual machines with KVM. I would like to expose some of these virtual machines on the internet, to make it possible for customers to test the products we'...
1
vote
0answers
141 views

Ubuntu Server UFW NAT Issues

*nat :POSTROUTING ACCEPT [0:0] -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE -A ufw-before-input -i tun0 -j ACCEPT -A ufw-before-output -i tun0 -j ACCEPT -A ufw-before-forward -s 10.8.0.0/24 -j ...
1
vote
2answers
2k views

Cant forward port 443 to 8443 without allowing 8443 on ufw

I configured port forwarding through iptables and ufw. But there is something I do not understand, I just cant get iptables to forward port 443 to 8443 without allowing port 8443 on UFW. I want port ...
0
votes
1answer
1k views

Ubuntu IP Forwarding to virtual ethernet adapter

I've setup Ubuntu server along with ufw as a firewall. To start, I have two networks: Public: 66.xxx.xxx.70 - 66.xxx.xxx.78 Private: 192.168.3.1 - 192.168.3.255 My network config: auto eth0 iface ...
-2
votes
1answer
983 views

Restrict traffic to local network and VPN using ufw or iptables

I want to restrict all traffic from my ubuntu-machine to come or go from the local network (eth0) or from or to my VPN (tun0). It should be possible to connect the router in the local network but not ...
15
votes
3answers
9k views

Rate limiting with UFW: setting limits

UFW's man page mentions that it can setup iptables rate limiting for me: ufw supports connection rate limiting, which is useful for protecting against brute-force login attacks. ufw ...
13
votes
2answers
19k views

Ubuntu ufw: set a rule on a per interface basis

I want to create a rule that allows anyone on eth1 to access port 80. Can UFW do this or should I go back to using Shorewall? To clarify: this is a capabilties question, can ufw handle interfaces as ...
1
vote
1answer
3k views

How to use ufw to allow ip access by ranges

I am using a datacenter in Hong Kong (clould provider). I have monitoring servers in tokyo and I am using uwf for ubuntu 64 12.04 to limit access. I have never used ip tables, only ufw. My rules on ...
5
votes
1answer
356 views

What's the effect of iptables/ufw deny filters on server load?

I'm wondering how scalable it is to add IP addresses or subranges I want to block into ufw. E.g., I do this whenever I discover a particularly bad bot or server farm. As my list grows, I wonder how ...