Questions tagged [ufw]
Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.
473
questions
0
votes
0
answers
53
views
Docker compose gitea remote ssh connection refused
I have setup Gitea on an Ubuntu server using this docker-compose config:
version: '3.9'
services:
db:
image: docker.io/bitnami/postgresql:15
volumes:
- 'db_data:/bitnami/postgresql'
...
0
votes
0
answers
16
views
Tracing / Solving a sudden spike in Apache2
My server is running on Ubuntu20.04, a pure LAMP stack with Apache 2.4.41.
In the last few weeks, there was a total of 2 occurrence where Apache2 was not responsive (users can't load our website), and ...
0
votes
0
answers
18
views
Putty connection time out after enabling firewall
I have a problem after enabling ufw firewall. Everything was working well for the last few months but I wanted to add SSL and redirect traffic http->https so I wanted to open port 443. What I did - ...
- 101
0
votes
0
answers
31
views
Kubernetes master fails to connect every few seconds - strange error (Debian 11 OS)
inst@k8s-master:~$ kubectl get pods -n kube-system
NAME READY STATUS RESTARTS AGE
calico-kube-controllers-674fff74c8-g9dkn 1/1 Running ...
- 1
0
votes
1
answer
138
views
Is it possible to forward with UFW from a machine connected to ZeroTier VPN and situated on the LAN towards another machine on the LAN?
I am attempting to make possible for any machine connected to my VPN to be able to access services within containers on my server.
For this I have set a server with PROXMOX and subscribed to a Free ...
0
votes
0
answers
45
views
Best way of configuring a OpenVPN to allow access from the Internet to hosts behind a firewall
I have a Proxmox node with a bunch of VMs connected to a virtual bridged network. I have one VM on that bridged network that I want to connect to a Cloud VPS running OpenVPN. I then want to run an ...
- 1
0
votes
0
answers
19
views
Configuring ufw for Access via https, understanding the rules
I have a docker ecosystem running. Multiple containers need to communicate with each other. For reasons of my own I do not use the docker-supplied inter-container-communication but ordinary http/https ...
- 1
0
votes
1
answer
50
views
ufw firewall not working as expected (block specific incoming IPs)
So, I see these Apache access.log entries coming in every minute:
mydomain.com:80 95.211.199.153 - - [19/Apr/2023:23:34:28 +0000] "GET /index.html HTTP/1.1" 200 1425 "-" "Leaf/...
0
votes
0
answers
25
views
UFW logs - connections to closed port
I'm probably missing something easy to understand:
I've a tiny homeserver where there are some docker containers inside it, running on 192.168.1.10.
On top of them I've NGINX which works as a reverse ...
- 1
0
votes
0
answers
25
views
iptables input drop from ip changed to 0.0.0.0
I need block IP range cause they uses bots.
I'm enter two commands:
iptables -A INPUT -s 46.148.40.0/2 -j DROP
iptables -A INPUT -s 141.98.10.0/2 -j DROP
But in iptables-save it looks like
-A INPUT -...
- 1
0
votes
1
answer
64
views
Having trouble with ipset behaviour
Have a script to populates ipsets and then I do:
/sbin/iptables -I INPUT -m set --match-set ipsum src -j DROP
Now not sure how this works out for other ports but I know that if I want the addresses ...
0
votes
0
answers
86
views
Is allowing a forward forward rule in UFW from and to the same interface sane?
I'm experimenting with setting up a wireguard network using Linux peers (Ubuntu and raspberry). The "Server" peer is running UFW and I've been looking at the log to try and figure out what ...
- 1
0
votes
0
answers
23
views
Updating the `/etc.ufw/before.rules` file to allow `ufw` firewall redirection
I need to Configure My Server so that the ufw firewall running on it can redirect port 8080/TCP to port 80/TCP. From quick research, I know I can do it in Two ways; one is to run a command similar to;
...
- 1
0
votes
0
answers
76
views
Forwarding (local) RTSP/HLS traffic via VPN to expose on WAN IP of VPS
I feel like I am overcomplicating this extremely by wanting to do it securely, so a fresh look at this would help a lot.
I have a webcam that I want to publish / embed on a website. My current setup ...
- 1
0
votes
0
answers
237
views
I am trying to set up a simple http server in port 8000 and connect remotely. UFW is open at 8000, but the connection is refused
I am new to networking and servers and I am trying to get started by setting up a simple server in port 8000 in a remote host with python -m http.server 8000 and telnet from my local computer
I've ...
0
votes
0
answers
63
views
How to combine the firewalls for libvirt and ufw correctly
I am trying to use libvirt and ufw at the same host, but both of them insert a lot of firewall rules and own tables and they don't always play nice togethter.
The last problem I had was that ufw ...
- 1,600
0
votes
1
answer
245
views
UFW not allowing specified ports
I have this
Status: active
Logging: on (low)
Default: allow (incoming), allow (outgoing), disabled (routed)
New profiles: skip
To Action From
-- --...
- 313
0
votes
1
answer
224
views
Accessing server behind wireguard not possible
I am running a VM at hetzner (named gateway in the diagram below) that is used as a wireguard server. I hand out public IPv6 addresses via wireguard to clients. It is possible to ping all systems from ...
- 111
0
votes
1
answer
1k
views
Wireguard is not working: 'wg0' is not a WireGuard interface
I've got an issue with wireguard. I have a debian-based VPS, and a Manjaro client.
Here is my /etc/wireguard/wg0.conf of a server:
[Interface]
Address = 10.0.0.1/24
ListenPort = 194
PrivateKey = <...
0
votes
0
answers
55
views
ufw enableing error on POP OS
ERROR: problem running ufw-init
iptables-restore v1.8.7 (legacy): iptables-restore: unable to initialize table 'filter'
Error occurred at line: 1
Try `iptables-restore -h' or 'iptables-restore --help' ...
- 1
0
votes
0
answers
128
views
ufw status prints "inactive", but log files say otherwise?
Alright so I'm running this Ubuntu 22.04 server, it's about 6 months mature now and has had a sparkling security record to date.
Today I SSH'd in just to check one of the UFW rules, and lo—
$ sudo ufw ...
- 1
0
votes
0
answers
146
views
How To Forward Port to Different Port to an External IP using UFW Firewall
I have an VPN server on Server B port 442
before I Forwarded a different Port to my Server B using firewalld and worked nice , now I want to migrate to UFW for some reasons,
I tried before.rules with
*...
0
votes
0
answers
122
views
Ufw not showing open port
I'm new to linux and I use ufw to open / close ports on my Debian 11 VPS.
If I use ufw stauts verbose I get the following list of open ports:
To Action From
-- ...
0
votes
0
answers
70
views
systemd-nspawn and firewall
I have a systemd-nspawn container configured with systemd-networkd, DHCPServer=yes and IPMasquerade=yes
For replication I've opened a mysql port in /etc/systemd/nspawn/machine.nspanw
[Network]
Port=...
0
votes
0
answers
17
views
ufw data direction switched?
So I'm configuring a new OpenVPN server; the VPN is tun0.
I want VPN clients to be able to resolve names from dnsmasq on the VPN server. I use this command:
ufw allow in on tun0 to any port 53 proto ...
0
votes
1
answer
143
views
How do I block outgoing SYN packets on my Ubuntu 18 server?
I have an Ubuntu 18 server which is being used as a VPN server ( V2RAY ) . My VPS provider ( OVH ) has sent me this abuse report :
2022.10.22 12:40:47 CEST 51.91.11.***:53258 8.8.8.8:443 TCP SYN 60 ...
- 33
0
votes
0
answers
26
views
On Virtual Private Server, ports are not reachable from the internet although no firewall is enabled
I have a newly set up virtual private server running Ubuntu 22.04. ufw is still disabled, iptables -L tells me all chains have the ACCEPT default policy, no specific rules are defined. So I'd expect ...
- 1
0
votes
0
answers
79
views
Setting an ufw rule for several interfaces at once
I'd like to know if it's possible to set up an ufw rule for a set of interfaces (e.g. a subnet) in one shot (?), especially using the CIDR notation, for example something as:
# ufw allow in on 192.168....
- 105
0
votes
0
answers
1k
views
wireguard docker, iptables and port forwarding to client
I have a dedicated server running Ubuntu 22.04 with a wireguard (wg-easy) server running in docker.
(ip addresses are examples)
Dedicated server
Wireguard Docker IP
Wireguard Client IP
142.250.70....
- 21
0
votes
1
answer
896
views
How to allow the traffic for a specific interface in ufw unconditionally
I've installed OpenVPN and now the firewall (ufw) is blocking the traffic for the client that connects to it. I'm sure of my OpenVPN setup since when I disable the firewall, I can access IPs from my ...
- 529
1
vote
0
answers
82
views
UFW warns about ports in /etc/services. Can that be disabled?
Whenever I do certain ufw commands, like ufw status, it outputs this before printing the data I was after:
WARN: Skipping 'mysql': also in /etc/services
WARN: Skipping 'ntp': also in /etc/services
...
- 229
0
votes
1
answer
78
views
1 Interface with 2 IP's. How can I make UFW or Firewall-Cmd make different rulesets per IP
So I have a server with 1 interface "Eth0" and that interface has 2 IP's
192.168.0.10 -> Apache2
192.168.0.20 -> NginX
They share the same default gateway.
How can I make Firewall ...
- 127
0
votes
0
answers
124
views
fail2ban and uwf: openvpn is not blocked
I'm trying to block invalid openvpn connections with fail2ban and ufw. It seems that fail2ban works like expected:
/> grep "86.236.232.215" /var/log/fail2ban.log
2022-09-13 13:46:41,312 ...
- 979
1
vote
1
answer
574
views
Why Can't I access my website ,even if 80 port of my ecs server is open?
Os system of ecs server :ubuntu.
Os of my computer:win10.
I deployed my web project to my ecs server. I could access my project online until I installed the ufw on my ecs server. I configured the ...
- 11
3
votes
2
answers
2k
views
Redis cannot bind a specific ip address?
I'm new to redis, but I want to set one up on my Raspberry Pi 4 (RP) for using it in a Django application (with celery).
On my RP I have installed a firewall, ufw, and allowed incomming traffic from ...
- 131
3
votes
2
answers
266
views
Sending remaining network traffic with RSYSLOG to specific file
I'm trying to concentrate logs from multiple equipments from multiple clients on my RSYSLOG server.
My server runs on Debian 11 with RSYSLOG v8.2102
The configuration is quite simple at the moment: I'...
- 33
1
vote
1
answer
800
views
When ufw enabled, FTP client stuck on: 150 Opening ASCII mode data connection
when I try to connect to FTP server as the following commands in debian while ufw is enabled
I got connected successfully
but I can't list the content of directories with the command ls , because it ...
- 147
2
votes
1
answer
3k
views
WireGuard & UFW : UFW blocks traffic on wg0, even if a rule allows it
I run Wireguard on Debian with the additional interface wg0. With this ufw rule, I would expect that ufw would pass my traffic:
ufw allow in on wg0 to any
But instead, ufw is blocking the traffic:
[...
- 555
0
votes
1
answer
90
views
How to correctly set limits ports?
So im currently working on setting a simpel server up with a game server using port 30110 and 30120, but i clearly getting dossed like crazy, how is the best way to protect against this, like i have ...
0
votes
1
answer
147
views
Routing between Wireguard and OpenVPN
I have set up Wireguard peer and OpenVPN server on the same machine. Machine has a public IP so other Wireguard peers and OpenVPN clients can connect to it.
For Wireguard I am using subnet: 10.10.6.0/...
- 1
0
votes
1
answer
104
views
UFW on debian vps not working as expected
I have a Debian 11 VPS server with ufw installed and running with some rules working and others don't, I have tried resetting, disabling, reloading and even uninstalling but all in vain.
Here is my ...
0
votes
0
answers
422
views
Nginx configuration with NodeJS application on Ubuntu 20.04
I've been attempting to configure a backend NodeJS server (ExpressJS) to use with Nginx, but there have been some difficulties. I am currently running a DigitalOcean droplet with Ubuntu 20.04 ...
0
votes
0
answers
439
views
Alternative to ufw and iptables on Ubuntu with Docker
I’ve recently learned that when I’m running docker containers it modifies iptables and makes life difficult to keep ports closed that I want to keep closed.
For example I have an nginx proxy that ...
- 119
2
votes
1
answer
104
views
How to prevent being cut off a remote machine after a misconfiguration of a firewall playbook
Despite being careful, such a situation can happen and can be very toilsome to fix.
- 581
1
vote
1
answer
684
views
UFW not allowing ssh even though i have allowed it
Struggling a bit with UFW on ubuntu, i have internal and external adapters and on this particular server i only want public access to port 22 which is the adapter "eno1"
To acomplish this i ...
- 119
0
votes
0
answers
169
views
Wing ftp server with reverse proxy and ufw
I set up a wing ftp server on my ubuntu server. Installation was easy and fast, but now when accessing the site for the first time and logging it, I just get redirected to an empty site. The html is ...
- 193
0
votes
1
answer
531
views
Ubuntu server not allowing domain to access laravel project [405]
I have a problem where my laravel project is accessed by my static IP on Azure but not from the domain that I linked it with:
I use nginx and ufw
This is the error.log for my Nginx:
nginx ...
- 101
0
votes
1
answer
66
views
UFW route not responding
Hi i tried to make a server where every software running on it is in a vm.
i tried using ufw to route the requests and it worked ... locally.
when i tried to connect to one of my vm using a vpn i saw ...
0
votes
1
answer
184
views
Can't add VPN address to UFW killswitch
I am trying to use UFW as a VPN killswitch as outlined in this guide:
https://adamtheautomator.com/linux-killswitch/
So far, I have been successful up to the step where I need to restrict outbound ...
- 101
0
votes
1
answer
5k
views
Postfix: Couldn't Stop "SASL LOGIN authentication failed" Attack in Mail Logs
I'm trying to stop an attack and logs with SASL LOGIN authentication failed for my mail server. However, I've been trying for a day and am still not able to achieve it. The logs continue to generate ...
- 101