Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

learn more… | top users | synonyms

0
votes
2answers
450 views

How do I test my firewall rules?

I've setup some rules in ufw and I've turned it on. Now I want to ensure my rules actually block traffic. However, when running nmap -PN -p <my_port> <ip> from my local workstation it ...
0
votes
2answers
219 views

Ubuntu UFW firewall turns itself off

I have UFW enabled on my server. However, I find that it is disabled at times, showing a status of "firewall not loaded". I enable it, verify that it is running (shows loaded and gives me a list of my ...
0
votes
2answers
207 views

IPTables rules re-appearing

Folks, I created two machines on SoftLayer's cloud. The machines are Ubuntu 10.4 64 bit, minimal config. I am running into a really strange problem that I have no idea where it is coming from. The ...
3
votes
1answer
386 views

UFW: Disable logging of blocks due to optional FIN/ACK message being received

I've recently built a server and decided to use UFW for the first time. I was investigating a possible connection issue (turns out it was their end) but I noticed that the logs are full of entries ...
2
votes
1answer
178 views

Cannot directly reject traffic on port 25

My server is running Ubuntu 10.04.4 LTS and I want to reject traffic to port 25. The goal is this: $ telnet {ip} 25 Trying {ip}... telnet: connect to address {ip}: Connection refused telnet: Unable ...
1
vote
1answer
16 views

UFW 0.35 - Redirect incoming port 2121 to port 21 on VM (other interface)

I'm posting here because I've got a server, and I want to redirect the port 2121 of my main interface (eth0) to the port 21 of my secondary interface (virbr0). This is my configuration : Physical ...
1
vote
1answer
277 views

Forward SSH to OpenVPN client via UFW

I have an Ubuntu 14 server that is running OpenVPN gateway and ufw. Let's call it Server A. I have an IP reservation for a permanently connected server (Server B). It always connects to OpenVPN and ...
1
vote
1answer
359 views

Configure ufw pptpd and dnsmasq on the same server

I've got a an ubuntu 14 server running both pptpd and dnsmasq. I'm having trouble configuring ufw to allow pptp clients to resolve their DNS queries using the local dnsmasq server. I've correctly ...
1
vote
1answer
105 views

Is there an iptables-apply equivalent for ufw

I just came upon iptables-apply, which applies an iptables ruleset and lets the user confirm that everything is working correctly before finally committing the changes. If the user does not confirm ...
1
vote
1answer
1k views

How does one configure UFW to allow private DNS requests, but block DNS requests from internet

I have an Ubuntu Server 12.04, with two network cards: eth0 is connected to the internet eth1 is connected to a private network (192.168.10.1) The server is configured as a gateway and hosts DNS ...
0
votes
1answer
38 views

ufw & iptables confusion

I have previously added some netfilter rules via iptables. I'd now like to manage these rules through ufw and to simplify things I wanted to get rid of the current rules and start afresh as if I was ...
0
votes
1answer
78 views

UFW insert [number] throws error

Using Ubuntu server 14.04LTS I want to configure my UFW to limit ssh connections with the following command: sudo ufw insert 1 limit ssh/tcp which throws an error: ERROR: Invalid position '1' Due ...
0
votes
1answer
25 views

Forwarding over a vpn

I have a group of AWS web servers which will need to get into the business of initiating and speaking TCP over a VPN to a third party. Don't ask me why a VPN is the third party's chosen solution; that'...
0
votes
1answer
408 views

ipTables IP Range will not be blocked

I have setup fail2ban with this Tutorial http://wireflare.com/permanently-ban-repeat-offenders-with-fail2ban/ and it seems working. But the attackers are changing their IPs and thats why I decided to ...
0
votes
1answer
393 views

UFW allow outbound from ip address, deny from others

I am trying to allow outbound connections from a specific IP address and deny outbound from all other ip addreses on port 80, but can't seem to crack it: These are the commands: ufw deny out 80 ufw ...
0
votes
1answer
89 views

Ubuntu UFW setup on database server for connections to a varying array of clustered applications

I'm a little confused and could use some clarification. Let's say I want to deny all connections to a mongodb server, except for to SSH from my IP and from my IP to port 27017. The way I understand ...
0
votes
1answer
693 views

How to block spambots and about security

Is it normal to have many many lines in /var/log/kern.log about UFW block? For example: Aug 29 22:13:13 myvps kernel: [1980808.931708] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=60.173.8.240 DST=me ...
0
votes
1answer
580 views

UFW blocking webrick on port 3000

On a ubuntu 10.0.4 server runs redmine. starting webrick with: ./server webrick -e production -b lvps46-173-79-113.dedicated.hosteurope.de -d makes redmine available in browser. as soon as we ...
0
votes
1answer
500 views

Adding a custom SSH port to Ubuntu 12.04 LTS through UFW

I am trying to configure a Ubuntu 12.04 based VPS and I have changed my ssh port from 22 to 803 and everything worked fine. After this I've installed UFW and now I can't login using SSH. Before I ...
0
votes
1answer
780 views

Why is UFW blocking some allowed internal connections?

My set up is this: Server 1 (192.168.1.1) - nginx (load balance) - Ubuntu 12.04 LTS Server 2 - uwsgi - Debian 7.1 Server 3 - uwsgi - Debian 7.1 UFW on server 2 and server 3, is blocking ...
0
votes
1answer
138 views

webserver behind router or switch, multiple IPs available

We are getting a new internet connection 100Mbps UP/DOWN and 4 Static IPs. Also on that connection there will be a webserver that hosts some websites for us. (Nothing too fancy). The problem where ...
-2
votes
1answer
992 views

Restrict traffic to local network and VPN using ufw or iptables

I want to restrict all traffic from my ubuntu-machine to come or go from the local network (eth0) or from or to my VPN (tun0). It should be possible to connect the router in the local network but not ...
2
votes
0answers
495 views

Using ufw on OpenVZ-based VPSes

I'm facing with a problem to set up ufw on Ubuntu 12.04 running on an OpenVZ-based VPS. I know there is limitations for ufw. I googled a bunch of articles how to resolve the issue (like: http://blog....
1
vote
0answers
20 views

How do I remove ufw blocked protocol 59 log noise?

The logfile on one of my private servers running Ubuntu 14.04 is being filled with messages of the following form: [UFW BLOCK] IN=eth0 OUT= MAC=[macaddr] SRC=[srcipv6addr] DST=[destipv6addr] LEN=40 ...
1
vote
0answers
46 views

How can allow an ssh connection only over vpn

I install OpenVPN on my server following this guide --> https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04 I also setup a firewall with ufw where I add ...
1
vote
0answers
13 views

Can UFW read in rules from multiple files?

I see that UFW (UncomplicatedFireWall) will read in its rules from /lib/ufw/user.rules. However, it would be convenient if the rules could by split across multiple files, so that different servers can ...
1
vote
0answers
34 views

OpenVPN connection Time out after connecting to Server

I have set up OpenVPN on my Server and now have problems when connecting to it. As soon as the connection is established I cant use the internet anymore. SSH into the server is still possible. here ...
1
vote
0answers
46 views

UFW blocks permitted ports

I use ufw utility to manage my firewall for the system which runs web and mail services. The rules are follow: Status: active To Action From -- -...
1
vote
0answers
284 views

Docker's iptables=false option seems to have not the desired behavior

Good morning at all. I am running Ubuntu 14.04 server and Docker 1.8.1 and UFW is my front-end to manage iptables. I need to run an application into a container. I do need the following behavior: ...
1
vote
0answers
144 views

`ufw insert 1 deny to any` not working

ufw insert 1 deny to any ufw enable ufw status Status output: Status: active Logging: on (high) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip To ...
1
vote
0answers
292 views

strongswan packet get natted when ufw is enabled

I'm using strongswan 4.6.4 to connect road warriors to my server (ubuntu 13.10), which is natted behind a firewall. left=%defaultroute leftsubnet=10.10.1.0/24 right=%any rightsubnet=...
1
vote
0answers
255 views

Strange dropped packets coming from port 8888 and with ACK or ACK+PSH set

Background During an incident on a small privative network (1 router/FW + 1 server) my server got accidentally exposed to the internet. Fortunately it was protected by it's own UFW to allow only 1 ...
1
vote
0answers
323 views

UFW blocks SSL connections Varnish/Apache2 on Ubuntu 12.04

I have installed Virtualmin on a Ubuntu 12.04 server and I'm using LAMP stack with Varnish (:80) in front of Apache (:8000). However, I cannot access https when UFW is enabled. When I disable UFW, all ...
1
vote
0answers
141 views

Ubuntu Server UFW NAT Issues

*nat :POSTROUTING ACCEPT [0:0] -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE -A ufw-before-input -i tun0 -j ACCEPT -A ufw-before-output -i tun0 -j ACCEPT -A ufw-before-forward -s 10.8.0.0/24 -j ...
0
votes
0answers
16 views

Jenkins master node incoming port number for slaves?

I have a Jenkins version 2.8 master node running on Ubuntu 14.04 and my slaves node cannot connect to it unless I disable the firewall via sudo ufw disabled. I have port 8080 already open so folks ...
0
votes
0answers
23 views

Containerized Local Web Server Behind EdgeMax Router

I have an Edgemax Lite router with a couple of machines on a single lan. I have one of the machines set up with Ubuntu server 16.04 running LXD. I want to be able to run applications in containers on ...
0
votes
0answers
58 views

Port-forwarding with openVPN client-server (ubuntu 16.04)

Here is my situation : - I want to set my computer (Ubuntu 16.04) as a VPN server. It has a local IP address 192.168.43.190, and a public IP - I have one raspberry pi as a VPN client, on a DIFFERENT ...
0
votes
0answers
20 views

DHCPv6 not working when UFW is enabled (Ubuntu 16.04 LTS)

So, as the title says, I setup a isc-dhcp-server for DHCPv6, which is working as long as UFW is disabled. Once enabled, though I have all the necessary rules in place, and UFW is enabled for v6, it ...
0
votes
0answers
14 views

reset ufw without disabling it

I'd like to reset the ufw settings back to the defaults, apply new settings, and only then reload the firewall. While I'm making the changes I'd like the firewall to keep running with its old settings....
0
votes
0answers
32 views

iptables, ufw, and psad - scanned UDP port alerts from router and devices on home network

I have a fresh install of Ubuntu 16.04. I configured iptables, ufw (with gufw), and psad using instructions from https://www.thefanclub.co.za/how-to/how-secure-ubuntu-1604-lts-server-part-1-basics and ...
0
votes
0answers
77 views

ssh login timed out after enabling the ufw firewall ubuntu server

I followed digital ocean tutorial to enable the firewall in my ubuntu server. The steps I performed is: 1> change the port no to some other no. (8338) 2> enable firewall using sudo ufw allow ...
0
votes
0answers
28 views

i see an open udp connection on port 50113 on server

I just setup a new server and see an established connection on port 50113 (udp). I do not recall setting up anything on the server that would require port 50113 (tcp or udp). I have ufw/ip tables - ...
0
votes
0answers
23 views

How to configure UFW to deny outgoing traffic on all ports except a few ones I specify manually?

Sounds simple but it does not look like it is with UFW. Does anyone know how to do that without having to specify thousands of lines?
0
votes
0answers
196 views

OpenVPN with UFW [ TLS Error: TLS handshake failed ]

I installed Openvpn in my server which already had UFW installed i enabled ip forward in vi /etc/sysctl.conf applied changes using sysctl -p I also enabled forwarding using echo 1 > /proc/sys/net/...
0
votes
0answers
68 views

Block ipv6 range in UFW

I have a Ubuntu server running UFW as a firewall. Since a couple of days a Chinese ipv6 address keeps scanning my server over and over again. My visitor analytics software shows anonymized ip ...
0
votes
0answers
223 views

UFW Router default deny routed and ufw rules

I have an ubuntu 14.04 server running as my internet gateway in front of a dmz and a second ubuntu 14.04 server running as a router between my dmz and internal subnet, both using ufw in front of ...
0
votes
0answers
164 views

UFW - Set correct kernel params

As every system administrator does, one of the first things i did right after booting up my web server was install ufw and tune/set kernel parameters in /etc/sysctl.conf. By the way, this is my /etc/...
0
votes
0answers
90 views

UFW blocking open ports until manual reload

I'm having a hard time getting my head around this ufw issue I'm having. Here is the output of ufw status verbose: Status: active Logging: on (low) Default: deny (incoming), allow (outgoing),...
0
votes
0answers
132 views

UFW not working on Debian while ufw status looks good

The problem is: On a server that has several interfaces, loopback, eth0 with public IP and several Docker virtual interfaces, I wanted to use UFW to deny all of the incoming traffic on eth0 for the ...
0
votes
0answers
69 views

nginx upstream an ufw

I have a WSGI server on port 8080 and Nginx with following setup: server { location / { proxy_pass http://localhost:8080; } } when I enable UFW I can't access my page in ...