How can I make it that only approved IP addresses have access to my Ubuntu server 12.04 I only just set it up.


You can achieve this with following commands provided you have UFW install:

To allow by a specific IP address use,

sudo ufw allow from XXX.XXX.XXX.XXX

To allow by a specific subnet we invoke netmask and use,

sudo ufw allow from XXX.XXX.XXX.XXX/XX

To allow by a specific port and an IP address you can use,

sudo ufw allow from XXX.XXX.XXX.XXX to AAA port YY

Please refer community documentation for advance help.

Using tcpwrappers,

/etc/hosts.deny is checked before /etc/hosts.allow, so you can go

  • hosts.deny

    ALL : ALL

first, we block everything from everyone,

  • hosts.allow

    ALL : localhost


which means only on your local network can access ssh server on that machine.

  • 1
    I suspect you might be able to do it with tcpwrappers (/etc/hosts.allow) too. Jun 29 '12 at 17:30

This would be accomplished with iptables (netfilter), the built-in firewall utility for Linux.

Depending on what you're doing with your server (and what you're serving), this will need to be (carefully) configured to permit the appropriate traffic.

There's a good tutorial on this at Ubuntu's official help website and there's also ufw (Uncomplicated Firewall) that's built in to Ubuntu to handle the basics. For example if you wanted to only permit SSH (TCP 22) access from, you'd do this:

sudo ufw allow proto tcp from to any port 22

You can also use one of several handy iptables rule generators to generate an entire iptables ruleset.

Another suggestion (especially if this Ubuntu host will be on the Internet) would be to use SSH key pairs for authentication instead of passwords; I'd also disable root logins.


Worth noting - to catch the private address range (RFC1918) you probably want, -not- /8.

  • 1
    +1. That RFC recommends to limit the network part to not less than 16 bits for the 192.168 based networks. You could even take which provides 254 possible addresses. More than enough for most private networks.
    – ripat
    Jun 30 '12 at 7:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.