Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

0
votes
1answer
6k views

How to allow outbound traffic with UFW?

Ubuntu 10.04 | VPS Hi guys, I'm setting up a VPS server running Ubuntu 10.04 and I presently just want to allow ssh. I thought the following ufw commands would work... ufw default deny ufw allow ...
2
votes
0answers
471 views

Using ufw on OpenVZ-based VPSes

I'm facing with a problem to set up ufw on Ubuntu 12.04 running on an OpenVZ-based VPS. I know there is limitations for ufw. I googled a bunch of articles how to resolve the issue (like: ...
1
vote
1answer
108 views

Setting up ufw without locking yourself out

Basically I want to protect a Ubuntu server with a firewall and sided for ufw. The big problem is that I don't have physical access to the server, neither is it possible to force a reboot or revert to ...
0
votes
1answer
131 views

Limit HTTP method on ubuntu 12.04 server

For starters, this is not a web server. I would like to allow or deny HTTP methods on various ports on the server itself. Ideally could write rules like UFW only extended to include the HTTP method ...
0
votes
1answer
773 views

Incoming traceroute blocked by ufw

One of my Proxmox VMs running Ubuntu 13.04 won't accept incoming trace routes while ufw is enabled. What command do give ufw to allow incoming traceroute(6)s? The following shows up in the syslog ...
-1
votes
1answer
212 views

Trouble configuring sendmail to relay mail [duplicate]

I am trying to configure sendmail and ufw on an ubuntu server (ServerA) so that another server (ServerB) can send mail through it. In my /etc/mail/access file I have the following line (a.b.c.d is the ...
1
vote
1answer
4k views

UFW: force traffic thru OpenVPN tunnel / do not leak any traffic

I have VPN access using OpenVPN and try to create a safe machine that does not leak traffic over non-VPN interfaces. Using the firewall UFW I try to achieve the following: Allow Access from LAN to ...
0
votes
1answer
490 views

Adding a custom SSH port to Ubuntu 12.04 LTS through UFW

I am trying to configure a Ubuntu 12.04 based VPS and I have changed my ssh port from 22 to 803 and everything worked fine. After this I've installed UFW and now I can't login using SSH. Before I ...
-1
votes
1answer
960 views

UFW rules for specific host / dynamic dns

How can I setup UFW (Uncomplicated Firewall) to add rules for specific hosts? Eg. I want to allow SSH only from yourpc.no-ip.org?
1
vote
1answer
104 views

Is there an iptables-apply equivalent for ufw

I just came upon iptables-apply, which applies an iptables ruleset and lets the user confirm that everything is working correctly before finally committing the changes. If the user does not confirm ...
4
votes
2answers
4k views

Correctly setting up UFW on Ubuntu Server 10 LTS which has Nginx, FastCGI and MySQL?

I'm wanting to get my firewall on my new webserver to be as secure as it needs to be. After I did research for iptables, I came across UFW (Uncomplicated FireWall). This looks like a better way for me ...
0
votes
1answer
723 views

Why is UFW blocking some allowed internal connections?

My set up is this: Server 1 (192.168.1.1) - nginx (load balance) - Ubuntu 12.04 LTS Server 2 - uwsgi - Debian 7.1 Server 3 - uwsgi - Debian 7.1 UFW on server 2 and server 3, is blocking ...
1
vote
0answers
245 views

Strange dropped packets coming from port 8888 and with ACK or ACK+PSH set

Background During an incident on a small privative network (1 router/FW + 1 server) my server got accidentally exposed to the internet. Fortunately it was protected by it's own UFW to allow only 1 ...
4
votes
1answer
1k views

Cannot loopback to localhost php gateway causing nginx to timeout while setting up firewall with ufw

I'm setting up ufw for the first time. Using Ubuntu 10.04 LTS on an OpenVZ VPN and have the following rules: sudo ufw allow 22/tcp sudo ufw allow 25/tcp sudo ufw allow 53 sudo ufw allow 80 sudo ufw ...
1
vote
1answer
661 views

Amazon EC2 Servers with syslog-ng communication

I have 3 Amazon EC instances with ubuntu 12.04 Production Server (LAMP Server w/o MYSQL, syslog-ng client) Development Server (LAMP w/ MYSQL, syslog-ng client) Logging Server (syslog-ng Server) I ...
0
votes
1answer
737 views

How can I un-firewall port 80 on AWS Ubuntu Raring?

I have a web server I'm trying to make accessible, and although from the command line I get a connection by typing telnet localhost 80, it refuses nonlocal connections. The server is an AWS EC2 node, ...
2
votes
1answer
986 views

UFW - can I add a domain?

This will work fro the docs: sudo ufw allow proto tcp from 192.168.0.2 to any port 22 But..will this work? sudo ufw allow proto tcp from foo.bar.com to any port 22 I am using ubuntu 12.04
0
votes
1answer
613 views

Translating IPTables rule to UFW

we are using an Ubuntu 12.04 x64 LTS VPS. Firewall being used is UFW. I have setup a Varnish + LEMP setup. along with other things, including an Openswan IPSEC VPN from our office to the VPS data ...
3
votes
2answers
338 views

Which UFW messages can logcheck safely ignore?

Logcheck currently sends lots of emails with messages like this Jun 6 19:31:44 <hostname> kernel: [UFW BLOCK] IN=eth0 OUT= MAC=<mac-address> SRC=<source-ip> ...
0
votes
1answer
28 views

Installation issue in Ubuntu

i wanted to install ufw in my ubuntu 10.04. but, when i try to instal ufw the apt-get installer stalls my progress by trying too install my-sql server, which i dont want to install right now. Is ...
11
votes
1answer
8k views

Where are the logs for ufw located on Ubuntu Server?

I have an Ubuntu server where I am blocking some IPs with ufw. I enabled logging, but I don't know where to find the logs. Where might the logs be or why might ufw not be logging?
-1
votes
1answer
447 views

Linux server not routing my packets

I have a linux server (Ubuntu 12) with 2 NIC's. eth0 is connected WAN (inet 10.0.2.15 mask 255.255.255.0) eth1 is connected LAN (inet 192.168.0.1 mask 255.255.255.0) I want my windows machine to ...
1
vote
1answer
285 views

Blocking a service to countries with UFW

I am using UFW trying to block SSH access from multiple countries. I have been successful completely blocking access but I need a refinement: The server needs to allow world access to other services ...
1
vote
1answer
1k views

Allowing access to redis port for only specific servers with ufw

I've installed ufw on my Ubuntu 10.04 server. The only thing running on that server is going to be ElasticSearch and Redis. Redis uses port 6379. I only want two different IPs to be able to access the ...
0
votes
1answer
292 views

Unknown UDP trafic on fresh Ubuntu 12.04 install

I do configure ufw to deny outgoing trafic by default. On a fresh Ubuntu 12.04 install, I always get some random-like UDP trafic. I am curious to what generates this & how should I allow it (if I ...
3
votes
1answer
4k views

UFW Firewall Rules ordering?

I have the following rules on our server within UFW: To Action From -- ------ ---- 22 ALLOW 217.22.12.111 22 ...
1
vote
1answer
1k views

nginx or port 80 unreachable

After some server hardening, and installing NGINX (whitout modifying the configuration) I somehow cant access nginx from outside anymore. Sadly, I'm not at all an expert in theese things. The ...
0
votes
1answer
1k views

Deny from localhost with ufw

I have a service running on port 1339. Is it possible to deny requests from localhost to this port? Currently I have an ufw rule to allow requests from a specified IP but localhost can access the port ...
2
votes
1answer
177 views

Cannot directly reject traffic on port 25

My server is running Ubuntu 10.04.4 LTS and I want to reject traffic to port 25. The goal is this: $ telnet {ip} 25 Trying {ip}... telnet: connect to address {ip}: Connection refused telnet: Unable ...
3
votes
1answer
701 views

Ubuntu Server 12.04: How does one configure the firewall during installation?

I'm following instructions to automate the installation of Ubuntu Server 12.04 using kickstart. It works well for automatically partitioning the drives, selecting languages etc. However, it doesn't ...
1
vote
0answers
1k views

How does one configure UFW to allow private DNS requests, but block DNS requests from internet

I have an Ubuntu Server 12.04, with two network cards: eth0 is connected to the internet eth1 is connected to a private network (192.168.10.1) The server is configured as a gateway and hosts DNS ...
1
vote
0answers
315 views

UFW blocks SSL connections Varnish/Apache2 on Ubuntu 12.04

I have installed Virtualmin on a Ubuntu 12.04 server and I'm using LAMP stack with Varnish (:80) in front of Apache (:8000). However, I cannot access https when UFW is enabled. When I disable UFW, all ...
2
votes
1answer
220 views

In ufw is there any way to disable logging for a particular rule?

I am using UFW with a default logging policy of "low". I would like to keep this logging on for the default deny action, but disable it for a particular IP address only. So I'd like to create one ...
3
votes
1answer
1k views

How to place a virtual machine in DMZ?

I have an Ubuntu 12.04 server running few virtual machines with KVM. I would like to expose some of these virtual machines on the internet, to make it possible for customers to test the products ...
1
vote
0answers
141 views

Ubuntu Server UFW NAT Issues

*nat :POSTROUTING ACCEPT [0:0] -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE -A ufw-before-input -i tun0 -j ACCEPT -A ufw-before-output -i tun0 -j ACCEPT -A ufw-before-forward -s 10.8.0.0/24 -j ...
1
vote
2answers
2k views

Cant forward port 443 to 8443 without allowing 8443 on ufw

I configured port forwarding through iptables and ufw. But there is something I do not understand, I just cant get iptables to forward port 443 to 8443 without allowing port 8443 on UFW. I want port ...
0
votes
1answer
1k views

Ubuntu IP Forwarding to virtual ethernet adapter

I've setup Ubuntu server along with ufw as a firewall. To start, I have two networks: Public: 66.xxx.xxx.70 - 66.xxx.xxx.78 Private: 192.168.3.1 - 192.168.3.255 My network config: auto eth0 iface ...
-2
votes
1answer
959 views

Restrict traffic to local network and VPN using ufw or iptables

I want to restrict all traffic from my ubuntu-machine to come or go from the local network (eth0) or from or to my VPN (tun0). It should be possible to connect the router in the local network but not ...
13
votes
3answers
9k views

Rate limiting with UFW: setting limits

UFW's man page mentions that it can setup iptables rate limiting for me: ufw supports connection rate limiting, which is useful for protecting against brute-force login attacks. ufw ...
11
votes
2answers
17k views

Ubuntu ufw: set a rule on a per interface basis

I want to create a rule that allows anyone on eth1 to access port 80. Can UFW do this or should I go back to using Shorewall? To clarify: this is a capabilties question, can ufw handle interfaces as ...
1
vote
1answer
3k views

How to use ufw to allow ip access by ranges

I am using a datacenter in Hong Kong (clould provider). I have monitoring servers in tokyo and I am using uwf for ubuntu 64 12.04 to limit access. I have never used ip tables, only ufw. My rules on ...
5
votes
1answer
353 views

What's the effect of iptables/ufw deny filters on server load?

I'm wondering how scalable it is to add IP addresses or subranges I want to block into ufw. E.g., I do this whenever I discover a particularly bad bot or server farm. As my list grows, I wonder how ...
1
vote
1answer
781 views

configuring two network interfaces in ubuntu 10.04.1

I have got two NICs configured on a VM - each is tied to a specific network, one is a DMZ, the other is an internal network. I want MySQL to listen on the internal network only and Apache on the DMZ ...
0
votes
1answer
134 views

webserver behind router or switch, multiple IPs available

We are getting a new internet connection 100Mbps UP/DOWN and 4 Static IPs. Also on that connection there will be a webserver that hosts some websites for us. (Nothing too fancy). The problem where ...
1
vote
2answers
757 views

Firewall blocking some strange communications from source-port 22 to over-seas ip addresses. Should I be concerned?

I'm responsible for a server that serves a single service (ssh) over the internet via port-forwarding through a firewall. The ssh service login is limited to encryption-key only (no passwords ...
3
votes
1answer
1k views

UFW/IPTables: how to securely allow authenticated git access with github

This is how I setup my iptables with UFW: sudo ufw default deny incoming (deny all incoming) sudo ufw default deny outgoing (deny all outgoing) sudo ufw allow out 53 (accept outgoing DNS traffic, ...
0
votes
1answer
1k views

squid, ufw and iptables

I have a Ubuntu box with Squid installed acting as a transparent proxy server. The config which does the magic is the following. (eth0 is external interface and eth1 is internal.) sudo sh -c 'echo 1 ...
0
votes
1answer
1k views

Debian 6. What would be a good UFW initial firewall configuration?

I opened ports 22 25 80 443 993 995 The output of ufw status is... Status: active To Action From -- ------ ---- 22 ALLOW Anywhere 25 ALLOW ...
1
vote
3answers
3k views

what's wrong with my ufw configuration on Ubuntu server?

I've setup the ufw firewall for my Ubuntu server on linode as follows: Note that this is in the Lish terminal, unfortunately as soon as I turn on the ufw, I cannot: view my test website via port ...
2
votes
1answer
2k views

UFW blocking port 80 when it should not

I have these rules in UFW (default deny): 80 ALLOW 10.0.0.0/8 443 ALLOW 10.0.0.0/8 80 DENY Anywhere 443 ...