Questions tagged [ufw]

Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

Filter by
Sorted by
Tagged with
0
votes
1answer
20 views

openvpn restricting clients from accessing certain IP's in internet with ufw

I'am looking for a solution which can block openvpn clients in accessing certain website(ip's) in internet, i tried ufw rules like below , but doesnt seems to work from client, what piece do i miss? ...
0
votes
1answer
38 views

OpenVPN Server Routing/Firewall Settings [closed]

Short Desc: Connecting Rasp pi 3 as client to data center dedicated server for pulling backups over rsync. Getting "ERROR: Cannot ioctl TUNSETIFF tun0: Device or resource busy (errno=16)" Long Desc: ...
0
votes
0answers
17 views

ufw not blocking the connection

ufw default deny incoming ufw default allow outgoing ufw reset ufw allow ssh ufw enable But when I make PPTP connection to my server it is still allowed. UFW STATUS VERBOSE
0
votes
0answers
20 views

How do I open a port in the firewall only for the private IP and not for the public IP?

I currently have a Linode which is configured with both a public internet facing IP, and a private internal datacenter IP which connects the servers over a private LAN. I want to open up a port on ...
0
votes
0answers
95 views

Proper UFW rules for webserver being tunneled through Openvpn Server on EC2 instance

I have configured a webserver locally. I am running an Ubuntu 18.04 EC2 instance which is configured as an openvpn server. My webserver is successfully connecting/tunneling to my OpenVPN Ubuntu server ...
0
votes
1answer
40 views

Ufw and Iptables. Which is better and why? [closed]

I am a newbie to this domain, so i kept researching on ufw and iptables. But I cant distinguish them clearly because in every article /blog both of these names are present and I am really confused ...
0
votes
2answers
31 views

How to block Internet Traffic to MySQL on Ubuntu 18.04

I have setup two KVM servers with a local hosting service. They provide me with one public IP per server. I installed mysql-server 8 on one of them. Before describing the issue, here's the result I'm ...
0
votes
0answers
10 views

random ufw rule disappears at various intervals

I'm becoming mad because of the following problem. machine: VM with 1GB RAM, Debian 10, updated packages running just sshd, postfix, fail2ban, nagios-nrpe and ufw Issue: there are several ufw rules, ...
0
votes
0answers
15 views

UFW activated, but still failed connections in auth.log

I activated the ufw on my ubuntu 18 server. After resetting to defaults, deny all incomming, I opened port 22, 80 and 443 and enabled the logging. In the ufw log, I can see a lot of blocked request. ...
0
votes
0answers
31 views

`ufw default deny outgoing` breaks sshuttle

sshuttle is this During the following process the content of my /etc/resolv.conf is: nameserver 1.1.1.1 Here is my initial ufw rules: Status: active Logging: on (medium) Default: deny (incoming), ...
0
votes
1answer
41 views

Use ufw to block users from accessing my server via a specific vpn

The last couple of days I've been having some weird small DDoS attacks on different VPS's I have online. The first one I detected using netstat and I noticed a bunch of IPs that were from a ...
0
votes
1answer
94 views

UFW/Iptables: Allow response to http(s) requests but block everything else

I'd like to block everything outgoing from my server while still allowing responses to incoming http/https requests. Some examples: User calls my server using his browser (https://myserver.example....
0
votes
0answers
23 views

UFW blocking allowed traffic

UFW on my raspberry pi seems to be dropping traffic it is explicity supposed to allow. It is set up to allow all traffic in and out on tun0, and only allow traffic in/out on wlan0 to/from the load ...
1
vote
1answer
210 views

ufw replacement (or workaround) for Debian 10

We have servers where the admins are used to using ufw on Debian 9. Upgrading to Debian 10 means switching from iptables to nftables (yes, we could still use iptables-legacy but do not want to unless ...
0
votes
2answers
102 views

Unable to allow Nginx in firewall

I installed Nginx on my Ubuntu 18.04 server with the following command : $ sudo apt-add-repository ppa:hda-me/nginx-stable $ sudo apt update $ ubuntu@www-example-com:~$ sudo apt install brotli ...
0
votes
1answer
31 views

Nginx not responding from outside the remote box

My website (Django/nginx/gunicorn/mysql) which is hosted on a remote box was working fine, until I decided to restart remote box for some reason. So after the restart, in the remote box when I say ...
0
votes
1answer
37 views

Do I need UFW in a Linux VM in Azure?

Access to Azure VMs are controlled by the "Network Security Group" (NSG) settings. I am in the process of setting up a Linux VM with a public IP on Azure and would like to know whether the NSG ...
0
votes
0answers
15 views

UFW allow on any tunnel

Is there a way to configure UFW to use a tun connection with a wildcard for the tunnel id? e.g. This works: sudo ufw allow in on tun0 to any port 8888 but this doesn't sudo ufw allow in on tun* to ...
0
votes
2answers
50 views

How can I make an IP white list for a port that is exposed with docker-compose

I'm trying to make a port (that is exposed by docker-compose) on public IP available only for some of my other IP addresses. I still need other ports to accept connections from any IPs. I've tried ...
0
votes
0answers
281 views

Fail2Ban -> UFW -> IPTables (how to log blocks)

Running: Ubuntu 18.04.4 LTS Fail2Ban v0.10.2 ufw 0.36 iptables v1.6.1 I've successfully setup fail2ban to use ufw to block ip's based on ssh authentication failures. As we know, ufw is just a front-...
0
votes
0answers
13 views

Is it possible to include the service or protocol name in ufw status output?

When running ufw status on Ubuntu 18.04, I'd like to be able to see the service or protocol name e.g. http, IMAP. Is this possible just using a single command? So in a list like the following there ...
0
votes
0answers
50 views

Why is UFW blocking port 80 when port 80 is allowed?

I have set up dozens of these Ubuntu 18 servers and have never had any issue with this before. I can't figure out for the life of me why it is blocking. Here is my UFW status: $ sudo ufw status ...
0
votes
1answer
338 views

(UFW) allow incoming and outgoing connections to specific IP, deny everything else

I'm trying to set up an UFW firewall like this: Allow all incoming and outgoing connections to IP 1.1.1.1 (all ports); Deny all other connections (incoming and outgoing); For the first item, the ...
1
vote
0answers
54 views

Ubuntu 18.04 as a reverse proxy server and NAT box

I'm setting up a system made of application and database servers all running on a private LAN. The application servers are accessed through HTTP Nginx reverse proxy server and the database servers are ...
0
votes
1answer
75 views

GCP Connection Failed - SSH - We are unable to connect to the VM on port 22

Since I received a email warning letter from google says "Action required: Critical problem with My First Project" saying my server has some abnormal outgoing activity , I tried to implemented ufw in ...
0
votes
2answers
67 views

ufw Firewall disabled after reboot

On Debian Buster I have installed the UFW Firewall However, after enabling $ ufw enable Command may disrupt existing ssh connections. Proceed with operation (y|n)? y Firewall is active and enabled ...
0
votes
0answers
69 views

UFW ratelimiting reset time once tripped

I'm a newbie at server administration, and think I might have screwed up. I have a debian webserver that doubles as a backup and is set up with UFW to limit FTP and SSH connections. I had an ...
0
votes
3answers
185 views

UFW + fail2ban not working with `nginx` to block attack scripts

my server is currently attacked by some script kiddies. I have set up fail2ban which correctly bans the IP. 2020-01-07 05:51:45,639 fail2ban.actions [1656]: WARNING [nginx-botsearch] 123.207....
0
votes
1answer
72 views

Troubleshoot firewall config, find what is blocking ports

I'm facing a problem with some firewall configuration. I've got a VM on Google cloud (based on a bitnami image), and I can't connect to it through port 80. I've set up some firewall rule with the ...
0
votes
1answer
44 views

What is the UFW equivalant of the following iptables rules?

I'm trying to translate some iptables rules to UFW but struggling a little. I believe the following: iptables -A INPUT -i lo -j ACCEPT would be: ufw allow in on lo I can't figure out the following ...
0
votes
1answer
61 views

UFW - allow connection to specific port from specific IP addres range

how to add rule by UFW that will allow connect to let's say SSH from ip range 10.0.0.10-10.0.0.20 ? does UFW supports --src-range function like iptables?
0
votes
0answers
304 views

UFW IPTables Port Forwarding to OpenVPN client

Let's say: Server with public ip 68.100.100.100 (has the OpenVPN server) Backend with a private ip tun0 10.8.0.6 (OpenVPN client connected to the Server' OpenVPN server) Client with ip 170.170.170....
0
votes
1answer
101 views

Can UFW do port forwarding of IPv4 to IPv6

I have an http/https server which is IPv6 only. To allow people who have IPv4 only to reach it I would like to use a server in the middle with IPv4 address and forward traffic to the IPv6 server from ...
0
votes
1answer
117 views

remove 3/min-limit of UFW logging (the clean way)?

since I'm not satisfied with th iptables ansible module (not stateful) I'm trying my way with UFW. Problem is, that UFW limits logging to 3/min which might be enough for nonentusiasts. so my ...
0
votes
0answers
65 views

UFW blocking NAS

I have standalone NAS (DLink DNS-320L). I have set up NFS share on this device. My NFS client is Ubuntu 19.10, with the following config: rw,soft,nointr,rsize=4096,wsize=4096,tcp,timeo=30 When I ...
0
votes
1answer
240 views

unban or unblock IP-address from fail2ban and iptables

Fail2ban blocked an IP-address which I would like to undo. I have When I run sudo fail2ban-client set sshd unbanip xxx.xxx.xxx.xxx (where the xx-part is the IP-address) I get a response: NOK: ('...
0
votes
0answers
29 views

Access webpage only through openvpn when openvpn-server and webpage is on the same server

I've installed openvpn-server on a remote server, opened port 1194/udp to allow vpn-traffic, and can connect to the server with openvpn client from my local machine. I also have a simple web-server ...
0
votes
0answers
237 views

How to stipulate ufw ICMP/ping rules from the ufw(8) command line in Ubuntu Linux?

How can one stipulate the following ICMP/ping-oriented rule (which works when inserted into /etc/ufw/before.rules) from the ufw(8) (UncomplicatedFirewall) command line instead of the /etc/ufw/*.rules ...
0
votes
1answer
710 views

Wireguard Access between clients - UFW block

there is a problem in wireguard setup regarding to UFW. CLIENT A -------- SERVER -------- CLIENT B 10.10.10.5 10.10.10.1 10.10.10.11 I want to access SSH from Client A to Client B, ...
0
votes
1answer
132 views

Need IPTABLES rules explanation about OpenVPN set up

I've got Ubuntu 16.04 and OpenVPN installed and seems to be working fine. But when I check firewall rules using "sudo ufw status", then I see this: Status: active To Action ...
0
votes
1answer
197 views

tun0 errors when running a vpn server?

I'm running a simple vpn server with these softwares: OpenVPN Shadowsocks MTProto Proxy My server config is: Ubuntu 18.04 x64 512Ram, 1vCPU UFW firewall Netdata monitoring Nginx It's been only few ...
1
vote
1answer
113 views

Which IPv4/6 ICMP types should I drop to block ping?

I'm using ufw. I want to block pings for IPv4 and IPv6. I've read guides by ubuntu as well as hosting companies I use, and answers on StackExchange sites. Advice is always to edit /etc/ufw/before....
0
votes
1answer
140 views

Ubuntu firewall how to configure idle connection timeout

How do I configure an idle connection timeout with Ubuntu firewall ? I am encountering an issue in my production environment and suspect that the idle connection timeout in the firewall is causing ...
0
votes
1answer
45 views

Ufw denying and re-allowing without adding two rules

So I'm using Fail2ban and the way it bans and unbans IP addresses is by using the ufw deny from xx.xx.xx.xx to any and allow. However, because new rules need to stay on the top of the list (above the ...
1
vote
0answers
46 views

Change logging priority of UFW

As far as I can tell (through journalctl -p 4) UFW logs all blocked connections as warnings. I'd really like to be able to use that log level for things I actually might want to respond to. Is there ...
0
votes
0answers
68 views

OpenVPN: forward traffic on specific ports to client

I have an OpenVPN server on a DigitalOcean machine, and several clients connecting to it, including a Synology NAS with a mail server. I would like to use the VPN server to forward all incoming mail ...
2
votes
1answer
285 views

Opening firewall of ubuntu server to access gunicorn/Flask app running on port 80

I am trying to serve an intranet application from a server running Ubuntu 18.04 on our local network The application is written in Flask and I have deployed it using gunicorn with the command me@...
1
vote
0answers
31 views

How to block bad url path that is not part of my site from showing in google search?

I have got a site that is running on Node.js (Express) , and Apache httpd. Hundreds of requests are coming in from malicious IP's, which I'm proactively blocking. (I have a script that looks at the ...
1
vote
0answers
277 views

SSH operation timed out while connecting to ubuntu

I have a Ubuntu server in which Nginx is configured as a reverse proxy to my web application. After configuring UFW rules for Nginx I am unable to do ssh with my box. I suspected this could be the ...
0
votes
0answers
80 views

Not able to access port 3000 on the LAN

I am on Ubuntu 16.0 Running Ruby on Rails with webric server as: I have opened the ports as: to open the port I have used ufw command as: sudo ufw allow 3000/tcp my Lan Ip is as: But if I access ...

1
2 3 4 5
7