Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

1
vote
1answer
24 views

UFW Enable requires y prompt, how to automate with Bash Script?

I'm trying to automate the setup of UFW on an Ubuntu 16.04 instance. However when I type: sudo ufw enable I get prompted to enter yes or no, is there a way to feed it yes or set it automatically to ...
1
vote
1answer
16 views

UFW 0.35 - Redirect incoming port 2121 to port 21 on VM (other interface)

I'm posting here because I've got a server, and I want to redirect the port 2121 of my main interface (eth0) to the port 21 of my secondary interface (virbr0). This is my configuration : Physical ...
1
vote
1answer
1k views

How does one configure UFW to allow private DNS requests, but block DNS requests from internet

I have an Ubuntu Server 12.04, with two network cards: eth0 is connected to the internet eth1 is connected to a private network (192.168.10.1) The server is configured as a gateway and hosts DNS ...
0
votes
0answers
16 views

Jenkins master node incoming port number for slaves?

I have a Jenkins version 2.8 master node running on Ubuntu 14.04 and my slaves node cannot connect to it unless I disable the firewall via sudo ufw disabled. I have port 8080 already open so folks ...
0
votes
1answer
26 views

Configure ssh on Ubuntu 16.04 recovery mode

So I have a dedicated server. My host was able to get me to recovery mode. I am able to log in using ssh. Here's my dilemma. I accidentally changed ssh ports while logged in and forgot to add a rule ...
21
votes
4answers
12k views

Where does UFW (uncomplicated firewall) save command-line rules to?

You add a rule like this: ufw allow 22/tcp The rule is saved, and is applied even after reboot. But it's not written anywhere in /etc/ufw. Where is it saved to? (Ubuntu, using ufw as pre-installed.)...
0
votes
0answers
25 views

Containerized Local Web Server Behind EdgeMax Router

I have an Edgemax Lite router with a couple of machines on a single lan. I have one of the machines set up with Ubuntu server 16.04 running LXD. I want to be able to run applications in containers on ...
0
votes
0answers
60 views

Port-forwarding with openVPN client-server (ubuntu 16.04)

Here is my situation : - I want to set my computer (Ubuntu 16.04) as a VPN server. It has a local IP address 192.168.43.190, and a public IP - I have one raspberry pi as a VPN client, on a DIFFERENT ...
1
vote
3answers
1k views

ping and traceroute does not work when UFW deny outgoing by default

How to make ping and traceroute work after setting UFW with deny outgoing by default? Here is my UFW configuration: sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), ...
4
votes
2answers
5k views

UFW Firewall Rules ordering?

I have the following rules on our server within UFW: To Action From -- ------ ---- 22 ALLOW 217.22.12.111 22 ...
0
votes
0answers
21 views

DHCPv6 not working when UFW is enabled (Ubuntu 16.04 LTS)

So, as the title says, I setup a isc-dhcp-server for DHCPv6, which is working as long as UFW is disabled. Once enabled, though I have all the necessary rules in place, and UFW is enabled for v6, it ...
0
votes
1answer
56 views

Why is UFW not working?

I've setup some rules on my ufw but I think it's just not blocking anything. This is its current status: ~# ufw status verbose Status: active Logging: on (low) Default: deny (incoming), allow (...
0
votes
1answer
78 views

UFW insert [number] throws error

Using Ubuntu server 14.04LTS I want to configure my UFW to limit ssh connections with the following command: sudo ufw insert 1 limit ssh/tcp which throws an error: ERROR: Invalid position '1' Due ...
0
votes
0answers
14 views

reset ufw without disabling it

I'd like to reset the ufw settings back to the defaults, apply new settings, and only then reload the firewall. While I'm making the changes I'd like the firewall to keep running with its old settings....
1
vote
1answer
50 views

HTTP connections are fast from local network, very slow from the outside world

I setup a Wordpress server in a Raspberry Pi with nginx, MariaDB and ufw. I also setup the No-IP service. When I access the server from my local network (192.168.0.173) I get a fast response but when ...
4
votes
1answer
963 views

How to block an attack on Wordpress using UFW on Ubuntu server?

On ny Ubuntu 14 box I have weird activity looking like attack on Wordpress page. Apache log shows a lot's of this: 191.96.249.54 - - [25/May/2016:00:46:57 +0200] "POST /xmlrpc.php HTTP/1.0" 500 585 "-...
14
votes
3answers
1k views

Debugging iptables and common firewall pitfalls?

This is a proposed Canonical Question about understanding and debugging the software firewall on Linux systems. In response to EEAA's answer and @Shog's comment that we need a suitable canonical ...
1
vote
0answers
20 views

How do I remove ufw blocked protocol 59 log noise?

The logfile on one of my private servers running Ubuntu 14.04 is being filled with messages of the following form: [UFW BLOCK] IN=eth0 OUT= MAC=[macaddr] SRC=[srcipv6addr] DST=[destipv6addr] LEN=40 ...
0
votes
0answers
34 views

iptables, ufw, and psad - scanned UDP port alerts from router and devices on home network

I have a fresh install of Ubuntu 16.04. I configured iptables, ufw (with gufw), and psad using instructions from https://www.thefanclub.co.za/how-to/how-secure-ubuntu-1604-lts-server-part-1-basics and ...
1
vote
0answers
47 views

How can allow an ssh connection only over vpn

I install OpenVPN on my server following this guide --> https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04 I also setup a firewall with ufw where I add ...
1
vote
0answers
13 views

Can UFW read in rules from multiple files?

I see that UFW (UncomplicatedFireWall) will read in its rules from /lib/ufw/user.rules. However, it would be convenient if the rules could by split across multiple files, so that different servers can ...
0
votes
1answer
104 views

How to configure postfix with ufw so that my web server can send email but it doesn't act as an open relay?

According to this guide: It is important to secure your server and make sure that Postfix is not configured as an open relay. It links to another guide which suggests using UFW as a firewall. I'...
1
vote
3answers
40 views

UFW: How to block http requests on another port than 80?

I am running an application on port 7000 which is part of a network. So it has to communicate over port 7000 with all other servers of the network (not LAN, dynamic IPs). It has also a web frontend ...
0
votes
0answers
77 views

ssh login timed out after enabling the ufw firewall ubuntu server

I followed digital ocean tutorial to enable the firewall in my ubuntu server. The steps I performed is: 1> change the port no to some other no. (8338) 2> enable firewall using sudo ufw allow ...
1
vote
4answers
3k views

How To Set iptables log rules for PSAD with UFW?

For PSAD to work, I need to add the following iptables rules and enable packet logging : iptables -A INPUT -j LOG iptables -A FORWARD -j LOG ip6tables -A INPUT -j LOG ip6tables -A FORWARD -j LOG I ...
2
votes
2answers
1k views

How to utilize UFW blocking published ports from docker

Might seem a silly question but i'm trying to get the following to work: I have a correctly configured UFW for only allowing certain source IPs access to my local service after migrating this ...
0
votes
1answer
38 views

ufw & iptables confusion

I have previously added some netfilter rules via iptables. I'd now like to manage these rules through ufw and to simplify things I wanted to get rid of the current rules and start afresh as if I was ...
1
vote
1answer
47 views

Traffic from OpenVPN client to 'self' rejected by UFW

I currently have a single VPS set up with OpenVPN server. My idea behind this setup is that, while developing, I would be connected to server over VPN, which would allow me to access ports on the ...
1
vote
1answer
45 views

Could not bind to additional port for apache via ufw on ubuntu 14.04

I just moved our site to DigitalOcean. Their DNS servers went down. I checked and last time there was a problem involving DNS servers it took 28 hours to fix. We have a consulting gig going at a ...
1
vote
0answers
34 views

OpenVPN connection Time out after connecting to Server

I have set up OpenVPN on my Server and now have problems when connecting to it. As soon as the connection is established I cant use the internet anymore. SSH into the server is still possible. here ...
0
votes
1answer
394 views

UFW allow outbound from ip address, deny from others

I am trying to allow outbound connections from a specific IP address and deny outbound from all other ip addreses on port 80, but can't seem to crack it: These are the commands: ufw deny out 80 ufw ...
1
vote
0answers
46 views

UFW blocks permitted ports

I use ufw utility to manage my firewall for the system which runs web and mail services. The rules are follow: Status: active To Action From -- -...
0
votes
2answers
129 views

UFW Forwarding on Port 80 to port 3000 on Single VPS [duplicate]

The following is on a Virtual Private Server online and only one machine. I have tried a number of ideas using UFW on Ubuntu 15.10 to forward an incoming request on port 80 to a simple app I have ...
16
votes
1answer
21k views

Can I use ufw to setup a port forward?

Im currently using ufw to enforce some basic firewall rules. Is it possible to also use ufw to do port forwarding? Specifically im wanting to forward incoming traffic to my server (same machine ...
0
votes
1answer
60 views

How to connect to ftp server from within LAN when the router port-forwards external connection away from it

Sorry for the long question. What it means is this: I am managing a small LAN that is protected by a router. router 192.168.1.1 server 192.168.1.9 client 192.168.1.2 client 192.168.1....
1
vote
4answers
5k views

ufw portforwarding to virtualbox guest

My goal is to be able to connect using remote desktop on my desktop machine, to windows xp running in virtualbox on my linux server. My setup: server = debian squeeze, 64 bit, with a public IP ...
0
votes
1answer
37 views

How do I allow outgoing connections from a service in UFW?

Hey I am using Apache server to power my Python-Flask application. It uses urllib2 which makes outgoing connections requests which are blocked by UFW. How do I allow only Apache to make outgoing ...
3
votes
2answers
4k views

Turning on UFW stops my e-mail client functioning (both imap and smtp) even though they are allowed?

I am using ubuntu 10.04 on a VPS. Without enabling UFW everythign works fine - imap using port 143. And sends emails using smtp port 587. However, when I turn on UFW a lot of problems are ...
0
votes
1answer
71 views

ufw deny from ip doesn't seem to be working

I've been tailing my server's access log while working today, and have noticed one of my client's wordpress sites getting hammered with login attempts from an IP from out of the country. I wanted to ...
3
votes
1answer
44 views

enabling ufw disables some of the settings in sysctl.conf

When I add rules to ufw and then enable it, some of my settings in sysctl.conf become void so I have to do sysctl -p after doing ufw enable. So for example one of my settings in sysctl.conf is to not ...
1
vote
1answer
277 views

Forward SSH to OpenVPN client via UFW

I have an Ubuntu 14 server that is running OpenVPN gateway and ufw. Let's call it Server A. I have an IP reservation for a permanently connected server (Server B). It always connects to OpenVPN and ...
-1
votes
1answer
232 views

I've installed and enabled ufw firewall, and I cannot connect to my server [closed]

I've installed ufw firewall on my little server, with ssh and web services. But, when enabled, the ssh connection lost, and I could neither connect to the hosted web via web browser. What has ...
3
votes
1answer
33 views

UFW - Rules by Service Versus Port and Protocol

What is the difference between creating allow/deny rules via a service versus a port and protocol? For example: ufw allow ssh versus ufw allow 22/tcp or even, ufw allow ssh/tcp. Which is the 1) ...
0
votes
1answer
98 views

ufw without connection tracking

I am using ufw on a high traffic webserver (lot of http/https traffic) on ubuntu (12.04 or 14.04). I tried tuning kernel parameters related to connection tracking with some success. However, ...
5
votes
1answer
105 views

Do I need to open any port for NTP synchronization to work if both outgoing and incoming are blocked on ufw?

One of my production servers, UFW configuration is as follows: Status: active Logging: on (low) Default: deny (incoming), **deny (outgoing)**, disabled (routed) New profiles: skip To ...
0
votes
0answers
28 views

i see an open udp connection on port 50113 on server

I just setup a new server and see an established connection on port 50113 (udp). I do not recall setting up anything on the server that would require port 50113 (tcp or udp). I have ufw/ip tables - ...
1
vote
1answer
116 views

Allow UFW access from IP wildcard

I would like to allow access from IP address based upon wildcards e.g. 64.201.52* How can this be done with UFW? Have tried sudo ufw allow from 64.201.52.*
2
votes
1answer
108 views

How to disable UFW ubuntu externally?

i am using amazon EC2, i enabled UFW in my server and without adding any other rule i logged out. now since there was no rule specified, i am not able to login to ssh and because of it even my website ...
5
votes
4answers
3k views

ufw blocking apt and dns

I installed ufw on my Debian system like the following: # aptitude install ufw # ufw limit 22 # ufw allow 80 # ufw allow 443 # ufw enable # ufw status verbose Status: active Logging: on (low) Default:...
0
votes
3answers
2k views

ufw blocking apt

I have the same Problem as described here, but the given solution doesnt work for me: ufw blocking apt and dns When I add the rule ufw deny out to any, and add the port 80, 443/tcp, ssh-port as ...