I have a cluster configuration with one machine that functions as a gateway (call it
master) and several machines that only have private IP addresses (call them
I recently installed
master and noticed that the machines behind the Gateway were no longer able to access the outside internet (
wget google.com fails).
I looked in my logs and saw lines that looked like this.
[609940.531858] [UFW BLOCK] IN=eth1 OUT=eth0 MAC=00:25:90:0c:e0:5b:00:25:90:32:3c:9e:08:00 SRC=192.168.0.178 DST=126.96.36.199 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=58107 DF PROTO=TCP SPT=59584 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 MARK=0x9
I added the following rule to
ufw allow from 192.168.0.178 ufw reload
Here's the output of
Status: active To Action From -- ------ ---- 22 ALLOW Anywhere Anywhere ALLOW 192.168.0.178 22 ALLOW Anywhere (v6)
wget still fails, and I still see more
UFW BLOCK lines like the above in my logs.
How do I correctly configure ufw to allow outbound traffic from the hosts behind my gateway?