Questions tagged [ufw]

Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

Filter by
Sorted by
Tagged with
0
votes
1answer
15 views

Iptables rules for UFW

I need the following rules implemented in UFW but don't know how to do this exactly: iptables -t nat -A POSTROUTING -o eth0 -s 10.8.0.0/24 -j MASQUERADE #Note: If you use tcp protocol you must change -...
-1
votes
0answers
25 views

ufw allow route in on wg0 out on wg0 to 10.0.0.6/32

I use a wireguard vpn to reversely connect to my home server via an external entry node. On that entry node, I try to add a firewall rule using ufw. Its purpose is to only allow routing to one and ...
0
votes
1answer
41 views

How to route openvpn traffic through a second network adapter, to access the internet

I am running an ubuntu server with two network adapters eth0 and usb0, both with separate internet connections. The openvpn server is listening on eth0, and client can connect to the vpn using the ...
-1
votes
0answers
21 views

Allow traffic between two subnets Openvpn

I have configured a vpn server of the type server 10.8.0.0 255.255.255.0 To isolate clients, I commented on the line client-to-client I block all traffic and allow some client clients to communicate ...
-2
votes
0answers
28 views

Using ufw to forward privileged port to non-privileged port

Is there a way of doing a local port forward using ufw and route allow? I've been experimenting with examples but many of these don't use ufw per-se, instead resorting to iptables, and none of these ...
1
vote
1answer
51 views

Open UFW port to specific IP with Ansible

I ran the following task copied right from the Ansible 2.9 docs: - name: Allow all access from RFC1918 networks to this host ufw: rule: allow src: '{{ item }}' loop: - 10.0.0.0/8 - ...
0
votes
1answer
28 views

Is it Safe to Use “ufw allow from xx.xx.xx.xx” Command for IP Addresses Which are Faced With UFW_BLOCK?

I have UFW opened on my database servers and I have seen a lot of UFW_BLOCK logs. Is it safe or right to use "ufw allow from xx.xx.xx.xx" and "ufw allow to xx.xx.xx.xx" command for ...
1
vote
1answer
62 views

What runlevel should ufw firewall start at in Alpine Linux?

I am using ufw on Alpine linux. I have configured it in a pretty standard way: apk add --no-cache ufw ufw allow ssh ufw allow http ufw allow https ufw limit ssh ufw enable rc-update add ufw default ...
0
votes
0answers
32 views

ubuntu 20.04 ufw - unable to browse port 80

I have an ubuntu server with 2x network interfaces: wifi IP 192.168.1.129 ethernet IP 10.10.10.2 Web browsing / internet access is via the wifi The ethernet connects to a switch with an IP camera, IP: ...
0
votes
0answers
20 views

Why are these packages removed when installing ufw on Debian 6?

I have a very old legacy server running Debian 6.0.10, from which I'm gradually moving things to Debian 10 on a fresh server. There haven't been any real issues, although I'm well aware there may be ...
1
vote
1answer
35 views

How to do client to client routing rules with UFW?

I would like to use UFW to control client to client access rules for a wireguard network. And I would like to do this on a central hub server. But I can't quite figure it out. Right now it works but ...
0
votes
0answers
23 views

Unable to port-forward with firewall

I am trying to create a simple gateway with ubuntu that performs the functions of nat, firewall, and forwarding. With the firewall disabled I can connect to a web server located in a subnet that I ...
0
votes
0answers
35 views

Can't access VPN server on remote LAN through client subnet

I've got a VPN server running on M1 which is behind a NAT N1. I've got a client M2 which is also behind a NAT N2 (scroll right): M2 (192.168.125.6) -----> N2 (70.23.34.56) --------...---------> ...
0
votes
0answers
47 views

Debian UFW deny incoming

I have applied the following rule: ufw default deny incoming and restarted ufw. All ports are still open. I can access any port from any IP. Why? ~# ufw status verbose Logging: on (low) Default: deny (...
0
votes
0answers
27 views

When port is not blocked why UFW block message

Why am I getting Port 8000 blocked messeges in syslog given ufw status shows that 8000 is allowed: To Action From -- ------ ---- 22 ...
0
votes
0answers
78 views

Why is UFW Blocking CloudFlare IP's when I've Whitelisted their ranges?

I have a script below that I use to grab the latest CloudFlare IP addresses and add them to a UFW Allow rule. #!/bin/bash ranges="$(curl -s https://www.cloudflare.com/ips-v4) " ranges+=$(...
0
votes
2answers
62 views

DNAT to another hidden port on same host

I am hoping to use iptables to silently redirect incoming traffic arriving at a privileged port on the public eth interface (public IPv4 address) to a hidden unprivileged port on the same ubuntu box. ...
0
votes
0answers
29 views

Ubuntu UFW blocks connections when enabled

Ubuntu 18.04.5 LTS Can someone help me with UFW problem because it is some magic... 3 months ago I have added rules and everything worked. Today I can't access server via SSH. Server IP and my IP ...
0
votes
0answers
21 views

ubuntu ufw.log constant requests

we have an ubuntu server that I use as an application server and only 5000th port can be accessed. ufw blocks all other ports. In my ufw.log file, it seems that there are requests from different ip ...
0
votes
1answer
69 views

maximizing security on gunicorn system

I have 2 machines running ubuntu server, one as a proxy running nginx and another machine as a app server running gunicorn. Lets name the nginx machine server 1 and the gunicorn server 2. Everything ...
0
votes
0answers
22 views

Ubuntu ufw active but still can connect to my web app

I have server with activated ufw. However I can still use my web app, which is open on port 3041 (through web browser) - how is it possible, what should I change? When I installed nginx the default ...
1
vote
1answer
127 views

Port 25 won't open on Digital Ocean droplet [duplicate]

I’m trying to set up an email server. I can’t seem to get port 25 to open for me. I literally just did: ufw disable ufw reset ufw default deny incoming ufw default allow outgoing sudo ufw allow 22/...
1
vote
1answer
129 views

ping returns IPV6 address on ubuntu 20.04

I have installed GitLab on a cloud VM and shortly after stood up a second VM as a postfix server with the same provider (Hetzner) I first noticed a problem when I went back to the GitLab server to ...
0
votes
1answer
44 views

UFW Weird ICMP log record - Pinging is blocked

In the log records below I have replace my eth MAC address with ETH_MAC_ADDRESS the IP of my server with MY_SERVER_IP and other IPs with STRANGE_IP plus a number to distingue. Jan 29 15:11:48 cld ...
2
votes
0answers
22 views

No route to host After allowing on ufw

I have allowed connection from anywhere to anyport using ufw: sudo ufw allow from any When I try to reach a service I still get blocked, I receive No route to host but if i disable firewalld then I ...
0
votes
0answers
38 views

Subnets in Server OpenVPN

I have set up an openvpn server according to my needs: I need to have 256 subnets and for each subnet I need 256 users, so I thought about creating a server of type 10.8.0.0/16. The server runs on ...
0
votes
0answers
67 views

Which one is controlling what, Ufw, iptables and webmin

I'm currently running ubuntu 18, iptables, ufw and webmin,and also have ip-persistant installed, but I'm not sure who's in control, because some instructions that's missing in one are in another, and ...
0
votes
0answers
74 views

ufw blocking certain traffic on web server that ought to be allowed

In an Ubuntu 16.04 machine hosting an internet-facing web application, my /var/log/syslog is being flooded by messages of the sort: Jan 9 17:41:50 ip-172-31-11-100 kernel: [483324.699896] [UFW BLOCK] ...
1
vote
0answers
130 views

Unable to access apache from port 80, likely due to firewall configuration

Background: My company hosts two server instances for our internal web-based systems dashboard: a development server and a production server. For added security on the production server, we usually ...
0
votes
1answer
178 views

How to allow all traffic on a local interface using UFW?

I've got Apache running as a reverse proxy for another Docker service. I got it working but as soon as I enable UFW, all connections are blocked with this error message: Dec 29 23:50:23 vps520941 ...
1
vote
1answer
223 views

ip6tables-restore on Debian upgrade: `RULE_APPEND failed (Invalid argument)`

On running the command ip6tables-restore < /etc/iptables/rules.v6 on the Debian server, I get ip6tables-restore v1.8.2 (nf_tables): line 48: RULE_APPEND failed (Invalid argument): rule in chain ...
0
votes
0answers
47 views

Allowing connections to specific domain on port 443

I'm trying to get my Discord.py bot running inside a Docker container on Ubuntu 18.04 and it's hitting an issue with "Connection reset by peer" on port 443 at discord.com - is anyone able to ...
0
votes
1answer
56 views

ufw enable port 3306 for mysql access, but can not ping

above are my ufw status but if I ping 3306 at https://ping.eu/port-chk/ it reports the port is closed your comment welcome
0
votes
1answer
56 views

Can not ping any hostname/domain when ufw enabled

Why I can't ping any domain/hostname when ufw enabled? [root@ip-172-31-23-37 ec2-user]# ping google.com ping: google.com: Name or service not known [root@ip-172-31-23-37 ec2-user]# ufw disable ...
0
votes
0answers
11 views

PSAD only showing router ip address

So I set up PSAD on my server, and tried testing it using an nmap scan. I used: nmap -A -p- hostname.tld and PSAD is only showing an attack coming from the router (192.168.1.1) (I am testing from ...
0
votes
1answer
39 views

Cannot connect to port 5432 locally even though it is allowed by UFW

I'm trying to setup my server so that port 5432 (Postgres) is accessible only from localhost. So I've denied everything, and added back port 5432, however I cannot connect to it. Here is my UFW config:...
1
vote
1answer
85 views

ufw deny from ip doesn't work

I know that I should setup fail2ban but at the moment I want to deny access from one IP address and tried the following ufw command: sudo ufw insert 1 deny from xx.xx.xx.xx to any Here's the output ...
1
vote
0answers
23 views

Ubuntu 18.04 UFW setup

I have one application running on two ports HTTP on 8080 and HTTPS on 8443. I want everyone to have access to port 8443 and whitelist 8080 to an IP, so only a particular IP can access the port. So I ...
3
votes
1answer
193 views

Can I use rate-limiting with HTTP basic authentication in Apache?

So I'm running a few popular web applications on my server. I want these to be reachable from any computer without creating too many vulnerabilities. I am using Apache 2.4.29 as my HTTP server. My ...
0
votes
1answer
122 views

How to only allow routing to IP range on particular interface?

I have two interfaces eth0 (192.168.10.x) and wlan0 (172.16.30.x) on my device (Raspberry Pi, Raspbian GNU/Linux 10 (buster)). Both networks have access to the internet, but I want my device to only ...
1
vote
0answers
26 views

UFW - making rules on host to only allow traffic from guest docker containers?

Situation: host running pgsql app in container on host want app to connect to database via TCP want to configure UFW so only containers on machine can connect to pgsql What's the best way to do this?...
1
vote
2answers
121 views

IPv4 Forwarding (NAT) only works after toggling IPv4 forwarding to off then on

This literally makes no sense and I'm stumped about why this is happening, but hear me out. Currently I'm using Proxmox 6 (Debian) and I created a NAT so VMs/LXC containers can communicate between ...
2
votes
0answers
89 views

UFW denying on interfaces blocks traffic on all interfaces

So I have a bit of a weird issue with ufw, I'm trying to block all incoming traffic on eno1 and use eno2 for incoming traffic instead, to do this I've ran the following commands to try to block eno1 ...
0
votes
1answer
218 views

How do I limit simultaneous connections to a port with UFW?

I see many articles regarding brute attacks, number of connections per N seconds, but in my case is different, i have a proxy server and i just want to limit connections from anywhere to 1 at the time....
0
votes
1answer
46 views

Why UFW port range / number for ports is limited to 15 ports? [closed]

Why UFW port range / number of ports is limited to 15 ports? man ufw: You cannot specify more than 15 ports
0
votes
0answers
194 views

Fail2ban overload from long-time-range portscan banning?

Problem I run several filter for f2b, which run fine. However, if I enable my ufw-portscan filter, my server gets problems: f2b starting, stopping, reloading takes long (3min+) f2b frequently hangs ...
0
votes
1answer
114 views

I ufw deny 53, but an nc scan reports a successful connection

Why is an nc scan able to successfully connect with port 53 when I've denied it through ufw? I noticed port 53 is listening: $ sudo ss -tulpne Netid State Recv-Q Send-Q Local Address:Port Peer ...
0
votes
0answers
56 views

ufw of my server blocks all traffic after going through online VPN config tutorial

I followed this tutorial https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-18-04#step-5-%E2%80%94-configuring-the-openvpn-service I have finished all the steps ...
0
votes
2answers
160 views

Why use a hardware firewall?

This question is rather conceptual and I just need some clarifications. Let's say on your linux server you've something like ufw installed or windows firewall on windows server. And you have layers ...
0
votes
0answers
60 views

How traffic flow to docker published port without iptables?

I wanted docker to respect ufw rules, so found this topic https://stackoverflow.com/questions/30383845/what-is-the-best-practice-of-docker-ufw-under-ubuntu I did the following: set "iptables&...

1
2 3 4 5
9