Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ufw]

Uncomplicated Firewall is a firewall configuration tool for Linux. It acts as a frontend to iptables. Originally designed for Ubuntu, it is available on many Linux distributions.

0
votes
2answers
55 views

huge traffic from different IPs on my ubuntu vps

I've change my vps recently, vps provider told me that he has backed up my VPS hdd from previous server and deployed it on the new server and changed just my ip, but now I have a huge traffic and ...
-1
votes
0answers
15 views

Accessing database over OpenVPN

So I have successfuly installed OpenVPN and MongoDB on my server. When I connect to VPN (client side) I have the public IP address of my server. When I want to connect to DB with mongo --host ...
0
votes
1answer
18 views

What happened if I change my IP with UFW deny by IP to port 22 rule?

If I set rule sudo ufw allow from *MY IP* to any port 22 it allow access to my server only for me, but what happen, if my IP change? Will I loose access to the server?
1
vote
2answers
44 views

Ubuntu 18.04.1 hangs regularly

I have some Ubuntu 18.04.1 virtual machines installed on VMWare ESXi 6.5, all of them have 3 core, 3GB ram, attached to a SAS Storage array. The servers are running nginx 1.14.0 as reverse proxy for ...
0
votes
1answer
32 views

Edge case UFW setup

I have a small edge case. I want to tighten down my servers as much as possible while remaining their given functionality. I have UFW enabled with the current default rules: Deny all incoming - Deny ...
2
votes
1answer
114 views

Fail2ban ufw action does not run when monitoring, but works for manual ban

I'm using fail2ban 0.9.3 on Ubuntu 16.04. My jail.local looks like this: [DEFAULT] banaction = ufw [apache-post] enabled = true filter = apache-post port = http,https logpath = /var/log/apache2/...
0
votes
0answers
15 views

Server with two NICs behind Ubiquiti ERX, connected to two separate private company networks with possible similar address spaces

We have a Ubuntu 18.04 Server running a web application that needs to be accessed by two companies. We have two NICs on the server, one goes to our local "shop floor" network (10.200.145.0/24) which ...
0
votes
1answer
41 views

cannot access proftpd installation from outside server

I have a digitalocean droplet running ubuntu 18 with Apache. I installed proftpd on there and when I log in to the droplet via ssh and run ftp myservertld or telnet myservertld 21 I can access the ...
2
votes
1answer
46 views

How to protect VPS by UFW firewall properly?

I set up a fresh VPS on DO and now I'm trying to protect my server using UFW firewall. But, I'm confused just a little bit. So, my goal is to allow the only SSH, HTTP/HTTPS related ports. The rest ...
0
votes
0answers
133 views

VPN setup for remote access on ubuntu 18.04

I have successfully setup a vpn server using this tutorial: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-ubuntu-18-04-2 . (but using pre-shared ...
0
votes
0answers
59 views

OpenVPN can connect but no internet unless UFW is disabled

I have searched and found several questions similar to this, but they often are unanswered or the answers do not work in my case. I'm hoping that the added detail will help debug my problem. My ...
0
votes
1answer
83 views

how do i check whether an ufw rule is reboot-safe?

So I have just added a firewall rule using ufw. How do I know whether I have to do additional steps to make this rule also automatically present after reboot? (2nd question, but less important to me:...
0
votes
1answer
115 views

ufw not enabled on boot

OS is Trisquel 8.0 (Ubuntu 16.04 LTS derived), kernel 4.4.0-131-generic I've reached the hair-tearing stage with ufw, which refuses to start up properly on system start. Have tried: Editing /etc/ufw/...
2
votes
2answers
428 views

UFW comment existing rule?

I'm trying to comment an existing ufw firewall rule, but i can't find the exact command I can easily add a rule with comment like sudo ufw allow in on eth0 to any port 80 comment 'test' but how i ...
1
vote
3answers
106 views

Test if UFW firewall change would prevent me from reconnecting

I want to manage UFW firewall rules on a number of remote Ubuntu 18.04 machines using Ansible. If a change to the firewall rules prevents me from re-connecting to the machines via SSH that would be ...
0
votes
1answer
574 views

Firewall completely disabled but still cant access port - Centos7 [duplicate]

I have disabled selinux in /etc/sysconfig/selinux: SELINUX=disabled rebooted and disabled both firewalld and iptables services. # sestatus SELinux status: disabled # systemctl ...
0
votes
1answer
185 views

Google compute - SSH - port 22 blocked by ufw

Well, I was doing some server setup reading this article and ran the following commands - sudo apt-get install ufw sudo ufw enable sudo ufw allow 80/tcp sudo ufw allow 443/tcp This basically ...
0
votes
0answers
264 views

Port Forwarding from Router / Public IP to server localhost:80

I have a 4G router connected to the NIC of a Ubuntu 18.04 server. I need to be able to use the public IP of the router to access the webpage hosted on the server. I have correctly configured port ...
0
votes
0answers
11 views

How to verify conformity of firewall/iptables rules with actual ufw rules?

ufw is awesome for setting up firewall rules. I'm not well versed regarding iptables rules, and therefore ufw is a really helpfull. When shooting iptables -L , there are a ton of rules added and set-...
0
votes
2answers
178 views

Using UFW to completely block internet provider [duplicate]

I am facing a DDOS attack from a few hundred IP addresses, all of them coming from various cities in India and have the same organization: "................ for GPRS Service". (I'm not mentioning the ...
0
votes
1answer
157 views

Connecting using ip address but not using web server name

I am able to access the website of a server (running Linux Mint 18 Sylvia) that uses an http like: http://myserver.house.pckhrest.edu I can not do remote connection to myserver.house.pckhrest.edu ...
0
votes
0answers
32 views

allow certain IPs to access port listening on loopback

I have docker running some services, binding the ports with 127.0.0.1:8080:8080, so they listen only on localhost. If I change that to 8080:8080, the ports will be open because Docker adds some rules ...
0
votes
2answers
311 views

Forward traffic from port 22 to virtual computer on ubuntu

I'm trying to forward traffic from port 22 on a host machine to port 22 on a virtual machine. My host is running ubuntu. I have tried to execute this command on my host: iptables -t nat -A ...
1
vote
0answers
141 views

Route and block HTTPS requests by domain with privoxy and havp

I'm configuring Privoxy and HAVP to run with OpenVPN and i'm stuck trying to block websites that use HTTPS (not all of them, some of them). I'm using the following in before.rules of UFW to redirect ...
0
votes
1answer
43 views

OpenVPN Block Server Traffic on Client Side

I'm trying to make a Reverse proxy running OpenVPN Server to expose some ports on a client to the internet. I only want to give the Reverse Proxy access to a webserver hosted in docker at this stage ...
0
votes
1answer
85 views

AWS EC2 instance: security groups and firewalls

On an EC2 instance, you can configure a security group to have what seem to be the same as firewall rules (e.g. default drop all traffic with selectively allowing port based, inbound or outbound ...
0
votes
0answers
63 views

set outgoing ip for specific user with ufw

What I want to do is to set a specific outgoing ip (not the main ip address) for uid 1004. Could anyone point out what's wrong with the code? The OS is Ubuntu 18.04. xx.xx.xx.xx represents an actual ...
1
vote
1answer
242 views

Slow rules inserting in UFW

I need to block about 10 000 IP addresses in my firewall, I have all IP addresses in file, so I run this command from command line: while read line; do sudo ufw insert 1 deny from $line; done < ...
0
votes
0answers
87 views

ufw conditional interfaces - Dynamic Routing only when an interface has an active connection

I have an interesting setup. Two Wireless Cards and One Ethernet Card all in one box. Sometimes the device is connected to the internet via wired Ethernet interface, and sometimes via Wireless ...
0
votes
1answer
84 views

packets from port 1900 to port 49125

I have a TP-Link Archer C7 router and a Debian 9.4 server that has UFW installed on it. I was looking through the UFW logs and it looks like my router is sending requests to port 49125 of server every ...
0
votes
0answers
90 views

UFW deny not banning

I've recently moved our server to AWS and am having difficulty getting UFW to ban IPs, I've never had the issue when running our server locally. I've tried the typical suggestions (ordering the rules, ...
0
votes
0answers
26 views

DDOS attack on cloudflare attached server

So I have like 4 Digital Ocean droplets and they all are attached to DNS through cloudflare. The problem is they all are being attackers in different times of month by millions of IPs and some of them ...
0
votes
1answer
205 views

Troubleshooting a problematic IPTABLE rule

Background I am very new to Fail2Ban, UFW, and IPTABLES. The rules in place on the VM in question, were mostly generated automatically. Some I added after following instructions for such. One is ...
0
votes
0answers
61 views

Closed ports with UFW but outside s can still shows them as open?

Those are my UFW settings at a Ubuntu 16.04 VPS according to them everything but 22 and 443 should be closed for inbound right? Well this is the result of an outside scan: enter image description ...
0
votes
1answer
239 views

No route to port 80 while HTTPS works

I can't figure out how to troubleshoot this. Whenever I try opening a website using HTTP, I get something like: $ wget example.com Connecting to example.com (example.com)|<IP_HERE>|:80... ...
0
votes
0answers
301 views

forwarding ports between vagrant windows 10 host and ubuntu guest fails

I am running a web server inside a guest ubuntu xenial64 os running on top of vagrant using hyper-v in a windows 10 machine. I know the web server is running o.k. because I was able to locally telnet ...
0
votes
1answer
101 views

Huge iptables list, can I reset this?

I've been trying to block an IP that is trying to break into a Wordpress installation on my server. At first I entered a command to drop connections to it using IPTables, but I could still see it ...
0
votes
0answers
501 views

UFW forward port to internal IP

I am running Ubuntu server 16.04. I want traffic coming in at port 80 and port 443 to go to one of my LXC containers I am running (let's say its IP is 10.20.0.100). Is it possible with UFW to have ...
0
votes
2answers
341 views

Docker, UFW and IP Tables

first of all, i kind of new to docker / linux / ufw and stuff! What i´m doing: I´m creating a docker container which exposes a port. in this case its 8080. The container behaves as expected. ...
-1
votes
1answer
49 views

Accessing resources on server that I'm connected to via OpenVPN

I run a pretty basic OpenVPN server that is set up along the lines of the guide from DigitalOcean. It uses UFW to only allow incoming connections for OpenVPN (default port) and SSH. Now, I also want ...
1
vote
1answer
609 views

Replace default iptables with ufw rules

I wanted to test removing all default iptable rules and replacing them with my own, using ufw. I have a very simple LAN that just needs 1/2 dozen ports, and iptable defaults are causing major ...
0
votes
1answer
30 views

Redirecting denied connections to ports 80, 443 to other IP that hosts an error page

Okay, here we go.. I am using UFW on my Debian 8 server to block all incoming connections on ports 80 and 443, except for those that I have allowed. However, I need to redirect those dropped ...
0
votes
0answers
248 views

ufw rules not properly working to access elasticsearch from outside from certain ips

I have the following rules in my ufw. What i want to allow is access to port 9200 (elasticsearch) from certain IPs. I obviously added some rules but I can't access es from outside with the added IP if ...
0
votes
0answers
210 views

Ubuntu 14.04 IPv6 setup with radvd and ufw

I am bringing up a rack of server is a co-hosting location and so far I have been using it with IPv4 and using NAT for the in-rack network. I want to add IPv6 so that I can address all the processors ...
0
votes
1answer
202 views

Linux: Bridging two ethernet connections together to allow second host onto first network

Situation: Network A <-> Server <-> Client Host I want to allow the client host to access network A via a bridge, allowing both hosts access to network A over one ethernet connection. These ...
2
votes
1answer
799 views

UFW rules for VPN [closed]

I have set up a VPN box on my lan. My lan gateway is 192.168.2.1. I set port forwarding on my router to allow incoming VNP connections. The VPN box LAN address is 192.168.2.42 The tun0 interface ...
0
votes
2answers
1k views

Blocking domain via ufw and iptables

Does anyone know a way to block the domain name of a website (www.firstlightfcu.org) while still allowing access to the site using the IP address (174.122.168.43)? I tried blocking the website using ...
0
votes
1answer
75 views

Traffic from banned ip still appearing in nginx log

I created a rule using UFW which banned an ip address with the following command sudo ufw insert 1 deny from <ip address> to any Now if I try to SSH to the server from that IP address it ...
-1
votes
2answers
59 views

Unable to access web application deployed on my Ubuntu 16.04 machine from other devices/laptops on the home LAN [duplicate]

I have made 2 webapps(I'm learning web development basics). One using ruby-on-rails and another using apache2. My laptop's local IP is 192.168.122.1. The following 2 urls are working on my machine : ...
1
vote
1answer
451 views

UFW doesn't block the mongodb port

I have blocked 27018 using ufw but still, I can connect to that port from my computer using mongo command line tool. is there any solution to this? I tried to run ufw reload but result is still the ...