Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

2
votes
1answer
27 views

How to block an attack on Wordpress using UFW on Ubuntu server?

On ny Ubuntu 14 box I have weird activity looking like attack on Wordpress page. Apache log shows a lot's of this: 191.96.249.54 - - [25/May/2016:00:46:57 +0200] "POST /xmlrpc.php HTTP/1.0" 500 585 ...
13
votes
3answers
1k views

Debugging iptables and common firewall pitfalls?

This is a proposed Canonical Question about understanding and debugging the software firewall on Linux systems. In response to EEAA's answer and @Shog's comment that we need a suitable ...
1
vote
0answers
12 views

How do I remove ufw blocked protocol 59 log noise?

The logfile on one of my private servers running Ubuntu 14.04 is being filled with messages of the following form: [UFW BLOCK] IN=eth0 OUT= MAC=[macaddr] SRC=[srcipv6addr] DST=[destipv6addr] LEN=40 ...
0
votes
0answers
19 views

iptables, ufw, and psad - scanned UDP port alerts from router and devices on home network

I have a fresh install of Ubuntu 16.04. I configured iptables, ufw (with gufw), and psad using instructions from https://www.thefanclub.co.za/how-to/how-secure-ubuntu-1604-lts-server-part-1-basics and ...
0
votes
0answers
33 views

How can allow an ssh connection only over vpn

I install OpenVPN on my server following this guide --> https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04 I also setup a firewall with ufw where I add ...
1
vote
0answers
13 views

Can UFW read in rules from multiple files?

I see that UFW (UncomplicatedFireWall) will read in its rules from /lib/ufw/user.rules. However, it would be convenient if the rules could by split across multiple files, so that different servers can ...
0
votes
1answer
39 views

How to configure postfix with ufw so that my web server can send email but it doesn't act as an open relay?

According to this guide: It is important to secure your server and make sure that Postfix is not configured as an open relay. It links to another guide which suggests using UFW as a firewall. ...
1
vote
3answers
37 views

UFW: How to block http requests on another port than 80?

I am running an application on port 7000 which is part of a network. So it has to communicate over port 7000 with all other servers of the network (not LAN, dynamic IPs). It has also a web frontend ...
0
votes
0answers
72 views

ssh login timed out after enabling the ufw firewall ubuntu server

I followed digital ocean tutorial to enable the firewall in my ubuntu server. The steps I performed is: 1> change the port no to some other no. (8338) 2> enable firewall using sudo ufw allow ...
1
vote
4answers
3k views

How To Set iptables log rules for PSAD with UFW?

For PSAD to work, I need to add the following iptables rules and enable packet logging : iptables -A INPUT -j LOG iptables -A FORWARD -j LOG ip6tables -A INPUT -j LOG ip6tables -A FORWARD -j LOG I ...
2
votes
2answers
938 views

How to utilize UFW blocking published ports from docker

Might seem a silly question but i'm trying to get the following to work: I have a correctly configured UFW for only allowing certain source IPs access to my local service after migrating this ...
0
votes
1answer
31 views

ufw & iptables confusion

I have previously added some netfilter rules via iptables. I'd now like to manage these rules through ufw and to simplify things I wanted to get rid of the current rules and start afresh as if I was ...
1
vote
1answer
21 views

Traffic from OpenVPN client to 'self' rejected by UFW

I currently have a single VPS set up with OpenVPN server. My idea behind this setup is that, while developing, I would be connected to server over VPN, which would allow me to access ports on the ...
1
vote
1answer
31 views

Could not bind to additional port for apache via ufw on ubuntu 14.04

I just moved our site to DigitalOcean. Their DNS servers went down. I checked and last time there was a problem involving DNS servers it took 28 hours to fix. We have a consulting gig going at a ...
1
vote
0answers
22 views

OpenVPN connection Time out after connecting to Server

I have set up OpenVPN on my Server and now have problems when connecting to it. As soon as the connection is established I cant use the internet anymore. SSH into the server is still possible. here ...
0
votes
0answers
12 views

UFW blank before.rules file

I am using UFW to configure my Debian IPTables firewall. I have issued the following command... ufw allow ssh This has successfully opened up Port 22 and I can now connect remotely via SSH. I ...
0
votes
1answer
317 views

UFW allow outbound from ip address, deny from others

I am trying to allow outbound connections from a specific IP address and deny outbound from all other ip addreses on port 80, but can't seem to crack it: These are the commands: ufw deny out 80 ufw ...
1
vote
0answers
31 views

UFW blocks permitted ports

I use ufw utility to manage my firewall for the system which runs web and mail services. The rules are follow: Status: active To Action From -- ...
0
votes
2answers
96 views

UFW Forwarding on Port 80 to port 3000 on Single VPS [duplicate]

The following is on a Virtual Private Server online and only one machine. I have tried a number of ideas using UFW on Ubuntu 15.10 to forward an incoming request on port 80 to a simple app I have ...
16
votes
1answer
20k views

Can I use ufw to setup a port forward?

Im currently using ufw to enforce some basic firewall rules. Is it possible to also use ufw to do port forwarding? Specifically im wanting to forward incoming traffic to my server (same machine ...
0
votes
1answer
40 views

How to connect to ftp server from within LAN when the router port-forwards external connection away from it

Sorry for the long question. What it means is this: I am managing a small LAN that is protected by a router. router 192.168.1.1 server 192.168.1.9 client 192.168.1.2 client ...
1
vote
4answers
5k views

ufw portforwarding to virtualbox guest

My goal is to be able to connect using remote desktop on my desktop machine, to windows xp running in virtualbox on my linux server. My setup: server = debian squeeze, 64 bit, with a public IP ...
0
votes
1answer
28 views

How do I allow outgoing connections from a service in UFW?

Hey I am using Apache server to power my Python-Flask application. It uses urllib2 which makes outgoing connections requests which are blocked by UFW. How do I allow only Apache to make outgoing ...
3
votes
2answers
3k views

Turning on UFW stops my e-mail client functioning (both imap and smtp) even though they are allowed?

I am using ubuntu 10.04 on a VPS. Without enabling UFW everythign works fine - imap using port 143. And sends emails using smtp port 587. However, when I turn on UFW a lot of problems are ...
0
votes
1answer
51 views

ufw deny from ip doesn't seem to be working

I've been tailing my server's access log while working today, and have noticed one of my client's wordpress sites getting hammered with login attempts from an IP from out of the country. I wanted to ...
3
votes
1answer
36 views

enabling ufw disables some of the settings in sysctl.conf

When I add rules to ufw and then enable it, some of my settings in sysctl.conf become void so I have to do sysctl -p after doing ufw enable. So for example one of my settings in sysctl.conf is to not ...
1
vote
1answer
239 views

Forward SSH to OpenVPN client via UFW

I have an Ubuntu 14 server that is running OpenVPN gateway and ufw. Let's call it Server A. I have an IP reservation for a permanently connected server (Server B). It always connects to OpenVPN and ...
-1
votes
1answer
136 views

I've installed and enabled ufw firewall, and I cannot connect to my server [closed]

I've installed ufw firewall on my little server, with ssh and web services. But, when enabled, the ssh connection lost, and I could neither connect to the hosted web via web browser. What has ...
3
votes
1answer
31 views

UFW - Rules by Service Versus Port and Protocol

What is the difference between creating allow/deny rules via a service versus a port and protocol? For example: ufw allow ssh versus ufw allow 22/tcp or even, ufw allow ssh/tcp. Which is the 1) ...
0
votes
1answer
81 views

ufw without connection tracking

I am using ufw on a high traffic webserver (lot of http/https traffic) on ubuntu (12.04 or 14.04). I tried tuning kernel parameters related to connection tracking with some success. However, ...
5
votes
1answer
86 views

Do I need to open any port for NTP synchronization to work if both outgoing and incoming are blocked on ufw?

One of my production servers, UFW configuration is as follows: Status: active Logging: on (low) Default: deny (incoming), **deny (outgoing)**, disabled (routed) New profiles: skip To ...
0
votes
0answers
26 views

i see an open udp connection on port 50113 on server

I just setup a new server and see an established connection on port 50113 (udp). I do not recall setting up anything on the server that would require port 50113 (tcp or udp). I have ufw/ip tables - ...
1
vote
1answer
78 views

Allow UFW access from IP wildcard

I would like to allow access from IP address based upon wildcards e.g. 64.201.52* How can this be done with UFW? Have tried sudo ufw allow from 64.201.52.*
2
votes
1answer
93 views

How to disable UFW ubuntu externally?

i am using amazon EC2, i enabled UFW in my server and without adding any other rule i logged out. now since there was no rule specified, i am not able to login to ssh and because of it even my website ...
5
votes
4answers
3k views

ufw blocking apt and dns

I installed ufw on my Debian system like the following: # aptitude install ufw # ufw limit 22 # ufw allow 80 # ufw allow 443 # ufw enable # ufw status verbose Status: active Logging: on (low) ...
0
votes
3answers
2k views

ufw blocking apt

I have the same Problem as described here, but the given solution doesnt work for me: ufw blocking apt and dns When I add the rule ufw deny out to any, and add the port 80, 443/tcp, ssh-port as ...
1
vote
1answer
104 views

Timeout error on MariaDB in Docker container

I have an ArchLinux installation with Docker and MariaDB running in a container. Now when I try to connect to the database, I get the following euro: MySQL said: Can't connect to MySQL server on ...
0
votes
2answers
282 views

Allowing outgoing connections to a particular IP with ufw

I have disabled outgoing connections as a whole with UFW seeing that I didn't want to take chances with my vBulletin forum exposing my server's IP address to attackers (I use CloudFlare). As I've ...
0
votes
0answers
22 views

How to configure UFW to deny outgoing traffic on all ports except a few ones I specify manually?

Sounds simple but it does not look like it is with UFW. Does anyone know how to do that without having to specify thousands of lines?
0
votes
0answers
6 views

Can not enable ufw in ubuntu VPS 14.04 [duplicate]

When I run following command sudo ufw disable It does not work. Got following errors ERROR: problem running ufw-init modprobe: ERROR: ../libkmod/libkmod.c:507 ...
1
vote
2answers
3k views

How to delete all ufw rules for a certain port?

I am using ansible to configure ufw on my DB servers to only let accept connections from certain servers connection to a specific port (lets say 1234). When a server that used to have access is taken ...
1
vote
1answer
124 views

Ubuntu 14.04 TCP established hash table entries

A bit of background I am running two servers under high traffic one with ubuntu 12.04 (linux 3.2.0-69-generic) and one with ubuntu 14.04 (linux 3.13.0-52-generic). I am now trying to secure both. ...
0
votes
0answers
181 views

OpenVPN with UFW [ TLS Error: TLS handshake failed ]

I installed Openvpn in my server which already had UFW installed i enabled ip forward in vi /etc/sysctl.conf applied changes using sysctl -p I also enabled forwarding using echo 1 > ...
0
votes
0answers
60 views

Block ipv6 range in UFW

I have a Ubuntu server running UFW as a firewall. Since a couple of days a Chinese ipv6 address keeps scanning my server over and over again. My visitor analytics software shows anonymized ip ...
0
votes
0answers
189 views

UFW Router default deny routed and ufw rules

I have an ubuntu 14.04 server running as my internet gateway in front of a dmz and a second ubuntu 14.04 server running as a router between my dmz and internal subnet, both using ufw in front of ...
0
votes
1answer
584 views

Postfix + Dovecot + IMAP SSL: imap-login: Aborted login

Am getting familiar with email Mail Server components and configuration. Knowing that there have been quite a few configuration changes to Dovecot 2.x and willing to use SSL encryption, I have come ...
1
vote
0answers
268 views

Docker's iptables=false option seems to have not the desired behavior

Good morning at all. I am running Ubuntu 14.04 server and Docker 1.8.1 and UFW is my front-end to manage iptables. I need to run an application into a container. I do need the following behavior: ...
1
vote
1answer
134 views

ufw port forwarding not working

I'm trying to set up an ubuntu 14.04 server as a router that also does some port forwarding. I've got the router part working but cannot for the life of me figure out why the port forwarding isn't ...
0
votes
0answers
142 views

UFW - Set correct kernel params

As every system administrator does, one of the first things i did right after booting up my web server was install ufw and tune/set kernel parameters in /etc/sysctl.conf. By the way, this is my ...
1
vote
1answer
85 views

Does order of UFW rules matter?

When I first initialized my ufw, I did ufw default allow outgoing ufw default deny incoming ufw allow 80/tcp ufw allow 22/tcp Over the last week or so, I've been going through my access logs and ...