I want to create a rule that allows anyone on eth1 to access port 80. Can UFW do this or should I go back to using Shorewall?
To clarify: this is a capabilties question, can ufw handle interfaces as a target?
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
I finally read the man page:
By default, ufw will apply rules to all available interfaces. To limit this, specify DIRECTION on INTERFACE, where DIRECTION is one of in or out (interface aliases are not supported). For example, to allow all new incoming http connections on eth0, use: ufw allow in on eth0 to any port 80 proto tcp
To elaborate a little the answer is yes, ufw can use the interface as a target. My particular rule looked like this:
ufw allow in on eth1 to [eth1 ip addr] port 80 proto tcp
If you need to do forwarding with
ufw (i.e routing traffic over an in & out interface):
ufw route allow in on eth0 out on br0 from 220.127.116.11 to 10.0.0.1 port 80,443 proto tcp
man page is very helpful