Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

3
votes
1answer
669 views

Ubuntu Server 12.04: How does one configure the firewall during installation?

I'm following instructions to automate the installation of Ubuntu Server 12.04 using kickstart. It works well for automatically partitioning the drives, selecting languages etc. However, it doesn't ...
1
vote
0answers
774 views

How does one configure UFW to allow private DNS requests, but block DNS requests from internet

I have an Ubuntu Server 12.04, with two network cards: eth0 is connected to the internet eth1 is connected to a private network (192.168.10.1) The server is configured as a gateway and hosts DNS ...
1
vote
0answers
272 views

UFW blocks SSL connections Varnish/Apache2 on Ubuntu 12.04

I have installed Virtualmin on a Ubuntu 12.04 server and I'm using LAMP stack with Varnish (:80) in front of Apache (:8000). However, I cannot access https when UFW is enabled. When I disable UFW, all ...
2
votes
1answer
175 views

In ufw is there any way to disable logging for a particular rule?

I am using UFW with a default logging policy of "low". I would like to keep this logging on for the default deny action, but disable it for a particular IP address only. So I'd like to create one ...
3
votes
1answer
1k views

How to place a virtual machine in DMZ?

I have an Ubuntu 12.04 server running few virtual machines with KVM. I would like to expose some of these virtual machines on the internet, to make it possible for customers to test the products ...
1
vote
0answers
132 views

Ubuntu Server UFW NAT Issues

*nat :POSTROUTING ACCEPT [0:0] -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE -A ufw-before-input -i tun0 -j ACCEPT -A ufw-before-output -i tun0 -j ACCEPT -A ufw-before-forward -s 10.8.0.0/24 -j ...
1
vote
2answers
2k views

Cant forward port 443 to 8443 without allowing 8443 on ufw

I configured port forwarding through iptables and ufw. But there is something I do not understand, I just cant get iptables to forward port 443 to 8443 without allowing port 8443 on UFW. I want port ...
0
votes
1answer
1k views

Ubuntu IP Forwarding to virtual ethernet adapter

I've setup Ubuntu server along with ufw as a firewall. To start, I have two networks: Public: 66.xxx.xxx.70 - 66.xxx.xxx.78 Private: 192.168.3.1 - 192.168.3.255 My network config: auto eth0 iface ...
-2
votes
1answer
845 views

Restrict traffic to local network and VPN using ufw or iptables

I want to restrict all traffic from my ubuntu-machine to come or go from the local network (eth0) or from or to my VPN (tun0). It should be possible to connect the router in the local network but not ...
9
votes
3answers
6k views

Rate limiting with UFW: setting limits

UFW's man page mentions that it can setup iptables rate limiting for me: ufw supports connection rate limiting, which is useful for protecting against brute-force login attacks. ufw ...
1
vote
3answers
4k views

ufw portforwarding to virtualbox guest

My goal is to be able to connect using remote desktop on my desktop machine, to windows xp running in virtualbox on my linux server. My setup: server = debian squeeze, 64 bit, with a public IP ...
10
votes
2answers
12k views

Ubuntu ufw: set a rule on a per interface basis

I want to create a rule that allows anyone on eth1 to access port 80. Can UFW do this or should I go back to using Shorewall? To clarify: this is a capabilties question, can ufw handle interfaces as ...
1
vote
1answer
2k views

How to use ufw to allow ip access by ranges

I am using a datacenter in Hong Kong (clould provider). I have monitoring servers in tokyo and I am using uwf for ubuntu 64 12.04 to limit access. I have never used ip tables, only ufw. My rules on ...
5
votes
1answer
304 views

What's the effect of iptables/ufw deny filters on server load?

I'm wondering how scalable it is to add IP addresses or subranges I want to block into ufw. E.g., I do this whenever I discover a particularly bad bot or server farm. As my list grows, I wonder how ...
1
vote
1answer
773 views

configuring two network interfaces in ubuntu 10.04.1

I have got two NICs configured on a VM - each is tied to a specific network, one is a DMZ, the other is an internal network. I want MySQL to listen on the internal network only and Apache on the DMZ ...
0
votes
1answer
125 views

webserver behind router or switch, multiple IPs available

We are getting a new internet connection 100Mbps UP/DOWN and 4 Static IPs. Also on that connection there will be a webserver that hosts some websites for us. (Nothing too fancy). The problem where ...
1
vote
2answers
636 views

Firewall blocking some strange communications from source-port 22 to over-seas ip addresses. Should I be concerned?

I'm responsible for a server that serves a single service (ssh) over the internet via port-forwarding through a firewall. The ssh service login is limited to encryption-key only (no passwords ...
3
votes
1answer
1k views

UFW/IPTables: how to securely allow authenticated git access with github

This is how I setup my iptables with UFW: sudo ufw default deny incoming (deny all incoming) sudo ufw default deny outgoing (deny all outgoing) sudo ufw allow out 53 (accept outgoing DNS traffic, ...
0
votes
1answer
1k views

squid, ufw and iptables

I have a Ubuntu box with Squid installed acting as a transparent proxy server. The config which does the magic is the following. (eth0 is external interface and eth1 is internal.) sudo sh -c 'echo 1 ...
0
votes
1answer
1k views

Debian 6. What would be a good UFW initial firewall configuration?

I opened ports 22 25 80 443 993 995 The output of ufw status is... Status: active To Action From -- ------ ---- 22 ALLOW Anywhere 25 ALLOW ...
1
vote
3answers
3k views

what's wrong with my ufw configuration on Ubuntu server?

I've setup the ufw firewall for my Ubuntu server on linode as follows: Note that this is in the Lish terminal, unfortunately as soon as I turn on the ufw, I cannot: view my test website via port ...
2
votes
1answer
1k views

UFW blocking port 80 when it should not

I have these rules in UFW (default deny): 80 ALLOW 10.0.0.0/8 443 ALLOW 10.0.0.0/8 80 DENY Anywhere 443 ...
3
votes
2answers
5k views

Opening port 5432 on ubuntu

I am trying to open port 5432 on ubuntu using ufw using sudo ufw allow 5432/tcp I then use nmap to see if port 5432 was opened and i get this: root@domain:~# sudo nmap -sS -O 127.0.0.1 Starting ...
7
votes
1answer
1k views

UFW logs blocked request on open port, what am I missing?

Nov 29 15:17:15 hostname kernel: [397768.554884] [UFW BLOCK] IN=eth0 OUT= MAC=[mac] SRC=[ip] DST=[ip] LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=17050 PROTO=TCP SPT=56152 DPT=80 WINDOW=65535 RES=0x00 ...
2
votes
2answers
571 views

How to show the current configuration of iptables with ufw?

This is what I get when I try to see the current iptables configuration: nes@sw-eng:~$ sudo ufw show ERROR: Unsupported action 'show' So, what else is there?
2
votes
1answer
476 views

Can ufw on a kvm host restrict traffic to guests?

I've set up a number of guests running on kvm on Ubuntu. Network access for the guests is via network bridge with br0 sitting on top of eth0. I have ufw running on the host machine and this is ...
2
votes
1answer
383 views

Recommended ufw port configuration to secure tomcat web-application ubuntu server?

Assuming an ubuntu server operating web applications on Tomcat (with redirection from apache 80 to 8080). What is the recommended port configuration to secure the server? Thanks. P.S.: I would like ...
1
vote
1answer
761 views

Redirect traffic from a single domain to another webserver using Bind9 and ufw

I have a DNS server setup with Bind9 and ufw as the firewall. ufw forwards all web traffic to our web server however I would like to redirect one domain to a different server. Example Servers DNS ...
3
votes
1answer
3k views

Turning on UFW stops my e-mail client functioning (both imap and smtp) even though they are allowed?

I am using ubuntu 10.04 on a VPS. Without enabling UFW everythign works fine - imap using port 143. And sends emails using smtp port 587. However, when I turn on UFW a lot of problems are ...
2
votes
1answer
867 views

setting up ufw for a website, I want to to disallow everything except ssh, e-mail, and http

I have read the basic instructions here: https://help.ubuntu.com/community/UFW I want to sudo ufw default deny and then sudo ufw allow ssh sudo ufw allow smtp sudo ufw allow www sudo ufw allow ...
1
vote
1answer
795 views

SSH freeze when UFW is enabled

I have a small Ubuntu 10.10 server and i recently noticed a weird behavior (not sure if it was happening before). If I have ufw enabled (with default deny all in, allow all out, allow all http, allow ...
0
votes
2answers
199 views

IPTables rules re-appearing

Folks, I created two machines on SoftLayer's cloud. The machines are Ubuntu 10.4 64 bit, minimal config. I am running into a really strange problem that I have no idea where it is coming from. The ...
4
votes
0answers
2k views

ufw deny all incoming and outgoing not working! [closed]

I'm sure I'm doing something wrong. I'm expecting my current rules of "denying all incoming/outgoing" to cripple anything network related, but it's not. First, I did: sudo ufw default deny incoming ...
4
votes
1answer
2k views

Should I be using iptables or ufw?

I know of iptables. I know of ufw. I've been using ufw in the past just because it's easier to setup and use. However, which one should I be using? Is iptables more secure? Is ufw more stable? I ...
3
votes
1answer
2k views

Ubuntu: How to add an iptables rule that UFW can't create

UFW is working really well for me except in the cases where it doesn't... I want to be able to add another rule manually that will be applied on boot? where should i put this rule? how should I ...
1
vote
2answers
315 views

The most efficient way to setup MySQL on Ubuntu Server 10 LTS?

This question was originally on stackoverflow.com, but I was told I may get a better answer on this site... Very soon I will setting up a web server for a client who has a very busy site. He has a ...
3
votes
1answer
3k views

Depend on a resource only if it exists in Puppet

I have a class for enabling firewall on nodes (using ufw, in Ubuntu): class ufw { package { ["ufw"]: ensure => latest } exec { "enable-firewall": command => "/usr/bin/yes | ...
0
votes
2answers
2k views

NAT problem with UFW

I'm trying to setup up an Ubuntu server, and first I want it to act as NAT/router/firewall. My question is: How do I make it so the computers connected to the LAN, can access Internet? eth0 Link ...
1
vote
3answers
659 views

Upgrading to ufw on Ubuntu 9.04

I've recently upgrade my Ubuntu server install to 9.04. I'd like to install and use ufw. Is there a way to import my existing iptables into ufw? I'm worried about switching it on, and having all my ...