Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

0
votes
2answers
37 views

UFW Forwarding on Port 80 to port 3000 on Single VPS [duplicate]

The following is on a Virtual Private Server online and only one machine. I have tried a number of ideas using UFW on Ubuntu 15.10 to forward an incoming request on port 80 to a simple app I have ...
15
votes
1answer
18k views

Can I use ufw to setup a port forward?

Im currently using ufw to enforce some basic firewall rules. Is it possible to also use ufw to do port forwarding? Specifically im wanting to forward incoming traffic to my server (same machine ...
-2
votes
0answers
29 views

Setting up a firewall on Ubuntu 14.04 with ufw having a dynamic IP address [migrated]

is it possible to lock down my server using ufw to grant access only from my office? The problem is, my office IP is dynamic (not only in the first 16 bytes but the whole IP). I had set the following ...
0
votes
1answer
17 views

How to connect to ftp server from within LAN when the router port-forwards external connection away from it

Sorry for the long question. What it means is this: I am managing a small LAN that is protected by a router. router 192.168.1.1 server 192.168.1.9 client 192.168.1.2 client ...
1
vote
4answers
5k views

ufw portforwarding to virtualbox guest

My goal is to be able to connect using remote desktop on my desktop machine, to windows xp running in virtualbox on my linux server. My setup: server = debian squeeze, 64 bit, with a public IP ...
0
votes
1answer
17 views

How do I allow outgoing connections from a service in UFW?

Hey I am using Apache server to power my Python-Flask application. It uses urllib2 which makes outgoing connections requests which are blocked by UFW. How do I allow only Apache to make outgoing ...
3
votes
2answers
3k views

Turning on UFW stops my e-mail client functioning (both imap and smtp) even though they are allowed?

I am using ubuntu 10.04 on a VPS. Without enabling UFW everythign works fine - imap using port 143. And sends emails using smtp port 587. However, when I turn on UFW a lot of problems are ...
0
votes
1answer
19 views

ufw deny from ip doesn't seem to be working

I've been tailing my server's access log while working today, and have noticed one of my client's wordpress sites getting hammered with login attempts from an IP from out of the country. I wanted to ...
3
votes
1answer
18 views

enabling ufw disables some of the settings in sysctl.conf

When I add rules to ufw and then enable it, some of my settings in sysctl.conf become void so I have to do sysctl -p after doing ufw enable. So for example one of my settings in sysctl.conf is to not ...
0
votes
1answer
148 views

Forward SSH to OpenVPN client via UFW

I have an Ubuntu 14 server that is running OpenVPN gateway and ufw. Let's call it Server A. I have an IP reservation for a permanently connected server (Server B). It always connects to OpenVPN and ...
-1
votes
1answer
46 views

I've installed and enabled ufw firewall, and I cannot connect to my server [closed]

I've installed ufw firewall on my little server, with ssh and web services. But, when enabled, the ssh connection lost, and I could neither connect to the hosted web via web browser. What has ...
3
votes
1answer
24 views

UFW - Rules by Service Versus Port and Protocol

What is the difference between creating allow/deny rules via a service versus a port and protocol? For example: ufw allow ssh versus ufw allow 22/tcp or even, ufw allow ssh/tcp. Which is the 1) ...
0
votes
1answer
35 views

ufw without connection tracking

I am using ufw on a high traffic webserver (lot of http/https traffic) on ubuntu (12.04 or 14.04). I tried tuning kernel parameters related to connection tracking with some success. However, ...
5
votes
1answer
59 views

Do I need to open any port for NTP synchronization to work if both outgoing and incoming are blocked on ufw?

One of my production servers, UFW configuration is as follows: Status: active Logging: on (low) Default: deny (incoming), **deny (outgoing)**, disabled (routed) New profiles: skip To ...
0
votes
0answers
23 views

i see an open udp connection on port 50113 on server

I just setup a new server and see an established connection on port 50113 (udp). I do not recall setting up anything on the server that would require port 50113 (tcp or udp). I have ufw/ip tables - ...
1
vote
1answer
42 views

Allow UFW access from IP wildcard

I would like to allow access from IP address based upon wildcards e.g. 64.201.52* How can this be done with UFW? Have tried sudo ufw allow from 64.201.52.*
2
votes
1answer
63 views

How to disable UFW ubuntu externally?

i am using amazon EC2, i enabled UFW in my server and without adding any other rule i logged out. now since there was no rule specified, i am not able to login to ssh and because of it even my website ...
5
votes
4answers
3k views

ufw blocking apt and dns

I installed ufw on my Debian system like the following: # aptitude install ufw # ufw limit 22 # ufw allow 80 # ufw allow 443 # ufw enable # ufw status verbose Status: active Logging: on (low) ...
0
votes
3answers
2k views

ufw blocking apt

I have the same Problem as described here, but the given solution doesnt work for me: ufw blocking apt and dns When I add the rule ufw deny out to any, and add the port 80, 443/tcp, ssh-port as ...
1
vote
1answer
49 views

Timeout error on MariaDB in Docker container

I have an ArchLinux installation with Docker and MariaDB running in a container. Now when I try to connect to the database, I get the following euro: MySQL said: Can't connect to MySQL server on ...
0
votes
2answers
215 views

Allowing outgoing connections to a particular IP with ufw

I have disabled outgoing connections as a whole with UFW seeing that I didn't want to take chances with my vBulletin forum exposing my server's IP address to attackers (I use CloudFlare). As I've ...
0
votes
0answers
20 views

How to configure UFW to deny outgoing traffic on all ports except a few ones I specify manually?

Sounds simple but it does not look like it is with UFW. Does anyone know how to do that without having to specify thousands of lines?
0
votes
0answers
6 views

Can not enable ufw in ubuntu VPS 14.04 [duplicate]

When I run following command sudo ufw disable It does not work. Got following errors ERROR: problem running ufw-init modprobe: ERROR: ../libkmod/libkmod.c:507 ...
0
votes
2answers
3k views

How to delete all ufw rules for a certain port?

I am using ansible to configure ufw on my DB servers to only let accept connections from certain servers connection to a specific port (lets say 1234). When a server that used to have access is taken ...
1
vote
1answer
83 views

Ubuntu 14.04 TCP established hash table entries

A bit of background I am running two servers under high traffic one with ubuntu 12.04 (linux 3.2.0-69-generic) and one with ubuntu 14.04 (linux 3.13.0-52-generic). I am now trying to secure both. ...
0
votes
0answers
136 views

OpenVPN with UFW [ TLS Error: TLS handshake failed ]

I installed Openvpn in my server which already had UFW installed i enabled ip forward in vi /etc/sysctl.conf applied changes using sysctl -p I also enabled forwarding using echo 1 > ...
0
votes
0answers
41 views

Block ipv6 range in UFW

I have a Ubuntu server running UFW as a firewall. Since a couple of days a Chinese ipv6 address keeps scanning my server over and over again. My visitor analytics software shows anonymized ip ...
0
votes
0answers
128 views

UFW Router default deny routed and ufw rules

I have an ubuntu 14.04 server running as my internet gateway in front of a dmz and a second ubuntu 14.04 server running as a router between my dmz and internal subnet, both using ufw in front of ...
0
votes
1answer
377 views

Postfix + Dovecot + IMAP SSL: imap-login: Aborted login

Am getting familiar with email Mail Server components and configuration. Knowing that there have been quite a few configuration changes to Dovecot 2.x and willing to use SSL encryption, I have come ...
1
vote
0answers
206 views

Docker's iptables=false option seems to have not the desired behavior

Good morning at all. I am running Ubuntu 14.04 server and Docker 1.8.1 and UFW is my front-end to manage iptables. I need to run an application into a container. I do need the following behavior: ...
1
vote
1answer
78 views

ufw port forwarding not working

I'm trying to set up an ubuntu 14.04 server as a router that also does some port forwarding. I've got the router part working but cannot for the life of me figure out why the port forwarding isn't ...
0
votes
0answers
94 views

UFW - Set correct kernel params

As every system administrator does, one of the first things i did right after booting up my web server was install ufw and tune/set kernel parameters in /etc/sysctl.conf. By the way, this is my ...
1
vote
1answer
54 views

Does order of UFW rules matter?

When I first initialized my ufw, I did ufw default allow outgoing ufw default deny incoming ufw allow 80/tcp ufw allow 22/tcp Over the last week or so, I've been going through my access logs and ...
0
votes
0answers
49 views

UFW blocking open ports until manual reload

I'm having a hard time getting my head around this ufw issue I'm having. Here is the output of ufw status verbose: Status: active Logging: on (low) Default: deny (incoming), allow ...
0
votes
1answer
460 views

Iptables to UFW before.rules not working

I've got the follwing working iptables commands: iptables -t nat -i ppp0 -A PREROUTING -p tcp --dport 81 -j DNAT --to-destination 192.168.16.8:80 iptables -t nat -A POSTROUTING -p tcp --dport 80 -j ...
0
votes
0answers
49 views

UFW insert [number] throws error

Using Ubuntu server 14.04LTS I want to configure my UFW to limit ssh connections with the following command: sudo ufw insert 1 limit ssh/tcp which throws an error: ERROR: Invalid position '1' Due ...
0
votes
0answers
39 views

Forwarding all traffic from port 80 to another IP with ufw

I want that all web traffic (port 80) coming through my server is redirected to another IP (10.0.3.101). I added this code at the end of /etc/ufw/after.rules, but for some reason it is not working. ...
0
votes
0answers
24 views

Setup UFW allow every port from my IP

Is it save to add allow rule to UFW which allow it to connect to every port of my VPS from my own IP (for example 1.2.3.44): To Action From -- ...
-1
votes
1answer
45 views

ufw status (what does the v6 stand for?)

My ufw status output looks like this: To Action From -- ------ ---- 22 ALLOW Anywhere 80/tcp ...
1
vote
1answer
104 views

Blocking illegal traffic to a vps using ufw or/and iptables

I am totally new in this, and I didn't know how to phrase my question title, so it might not be that accurate, forgive me on that matter beforehand. I'm getting some strange requests in my apache ...
9
votes
2answers
600 views

Debugging iptables and common firewall pitfalls?

This is a proposed Canonical Question about understanding and debugging the software firewall on Linux systems. In response to EEAA's answer and @Shog's comment that we need a suitable canonical ...
0
votes
0answers
87 views

UFW not working on Debian while ufw status looks good

The problem is: On a server that has several interfaces, loopback, eth0 with public IP and several Docker virtual interfaces, I wanted to use UFW to deny all of the incoming traffic on eth0 for the ...
7
votes
1answer
3k views

Copy UFW rules between servers

I'm doing a hardware refresh on a my Colo, I just need to copy my UFW rules from my old server to my new server. I dont seem to be able to get them copy all the active rules from my old server to my ...
0
votes
1answer
24 views

Forwarding over a vpn

I have a group of AWS web servers which will need to get into the business of initiating and speaking TCP over a VPN to a third party. Don't ask me why a VPN is the third party's chosen solution; ...
1
vote
1answer
236 views

How to temporarily open a port in ufw for a specific IP address?

I use ufw (Uncomplicated Firewall) on my web server. Right now I have it set up to allow SSH to the world and fail2ban to prevent massive sign in attempts. The web server has ports 80 and 443 open. ...
0
votes
0answers
152 views

UFW (Ubuntu 14.04) gazillion open ports after adding one rule

I have very strange situation with UFW firewall after upgrading Ubuntu Server 12.04 to 14.04. My UFW status looks like this ubuntu# ufw status verbose Status: active Logging: on (low) Default: deny ...
0
votes
1answer
313 views

ipTables IP Range will not be blocked

I have setup fail2ban with this Tutorial http://wireflare.com/permanently-ban-repeat-offenders-with-fail2ban/ and it seems working. But the attackers are changing their IPs and thats why I decided to ...
0
votes
1answer
72 views

How to extract IP addresses from log?

I'd like to gather information from UFW service, for further analysis. A typical UFW log entry looks like the following: [UFW BLOCK] IN=eth0 OUT= MAC=99:99:99:99:99:99:99:XX:XX:XX:XX:99:99:99 ...
0
votes
0answers
241 views

UFW allow outbound from ip address, deny from others

I am trying to allow outbound connections from a specific IP address and deny outbound from all other ip addreses on port 80, but can't seem to crack it: These are the commands: ufw deny out 80 ufw ...
0
votes
2answers
274 views

How do I test my firewall rules?

I've setup some rules in ufw and I've turned it on. Now I want to ensure my rules actually block traffic. However, when running nmap -PN -p <my_port> <ip> from my local workstation it ...