-3

I enabled the UFW firewall using SSH on my server at Digital Ocean running sudo ufw enable. and forgot to allow the ports for SSH, FTP, ... (but allowed port 80).

How can I SSH into the server or reset the firewall? Now I can't do anything, neither through SSH nor through FTP.

The root account is enabled and I know it's password, I also know the IP address.

1
  • 1
    TTY interface (virtual or physical) or something through your ISP.
    – Paul
    Nov 25, 2015 at 7:45

3 Answers 3

11

You don't need ssh access, Digital Ocean provide console access to your system. You can use this to log in and fix your rules.

To access the console click Droplets -> Name of your system, this will take you to a page with a large friendly blue button called Console Access.

Friendly Blue Button

Click the blue button to get a console. Once you're in, you can change the rules and test them from outside using ssh.

If you need to, you can reset the root password. That's available on the same page as the blue button.

0
3

Did you save your firewall config so it would be applied on boot? If not, hopefully a reboot will clear the rules. If so, you really only have two options:

  1. If your host gives you out-of-band console access, then you can use that to fix your server.
  2. If not, perhaps they have some sort of recovery image you can boot your server from.

If neither of these are an option, then you're screwed.

4
  • I config by ssh // sudo ufw enable // sudo ufw allow 80 // sudo ufw allow 465 Because I need to config SMTP port and logout from ssh T^T
    – Chidkai
    Nov 25, 2015 at 4:40
  • Well, then those rules will be applied on boot. Looks like you will need to recover your server using one of the methods I listed above.
    – EEAA
    Nov 25, 2015 at 4:41
  • then you're screwed.
    – Aloha
    Nov 25, 2015 at 5:01
  • @Chidkai I'm assuming you're using a fresh system (you're still configuring SSH rules). Just launch a new one and delete the current one if it's not too much hassle. Recovering the instance would require more effort depending on the host.
    – Aloha
    Nov 25, 2015 at 5:03
0

check out this link if you are using amazon aws.. How to disable UFW ubuntu externally?

If you are using rackspace then you will have a terminal in the dashboard which will allow you in and then disable the UFW.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .