Questions tagged [ufw]

Uncomplicated Firewall (ufw) is a frontend for iptables, works as a host-based firewall and provides a framework for managing netfilter, as well as a command-line interface for manipulating the firewall.

Filter by
Sorted by
Tagged with
0
votes
0answers
29 views

ufw not working on debian

I'm trying to install ufw on my debian buster machine and get it to work. I already insalled it using apt-get and if I try to do so again it says > ufw is already the newest version (0.36-1) So ...
1
vote
0answers
31 views

How to block ubuntu internet access?

I would like to block internet access in the browser (firefox) but when trying to do it with ufw it simply does nothing, try sudo ufw deny 80 sudo ufw deny 8080 sudo ufw deny 443 but nothing, will ...
0
votes
0answers
37 views

Why ufw blocks connection when they're allowed?

I have the following set of rules sudo ufw status numbered Status: active To Action From -- ------ ---- [ 1] 41337/tcp ...
0
votes
0answers
18 views

SSH to VPS works from specific IP but fails with Mobile Data (3G/4G)

The VPS (remote location) has UFW installed and the issue is that when I connect from my own computer / every device connected to my router it works perfectly fine but as soon as I use my phone's data ...
0
votes
0answers
37 views

UFW IPTables Port Forwarding to OpenVPN client

Let's say: Server with public ip 68.100.100.100 (has the OpenVPN server) Backend with a private ip tun0 10.8.0.6 (OpenVPN client connected to the Server' OpenVPN server) Client with ip 170.170.170....
1
vote
1answer
156 views

How should i enable UFW: through “systemctl enable” or “ufw enable”?

I know two ways to start UFW: through systemctl and through ufw itself. For example, when i use systemctl enable ufw, i get this status: systemctl status ufw ● ufw.service - CLI Netfilter Manager ...
0
votes
1answer
201 views

Allow UFW rules in specific IP range

I need to setup some firewall rules but I do not want to open them to public since I am running an nginx server, how can I allow the follow rules only locally from IP address 192.168.178.0 to .64? ...
1
vote
1answer
73 views

Why does UFW use a different sysctl.conf file?

There are a lot of network-related settings in /etc/sysctl.conf and a number of files in /etc/sysctl.d/. My data centre operator who has preconfigured the Ubuntu OS to work best in their environment ...
1
vote
2answers
214 views

ufw & iptables don't block incoming connection

I enable ufw and I tried to block all the traffic from one server, but I can't. It only blocks ssh, all the other ports are open. I test it with telnet. I want to allow all ports for some IPs, and ...
1
vote
1answer
61 views

Unable to make mosh work when ufw is enabled [closed]

I have a RPi running ArchLinux where I can login with mosh when ufw is disabled, but it doesn't work when it's enabled. This is my ufw setup: ❯ sudo ufw status numbered Status: active To ...
0
votes
1answer
30 views

NMAP shows open ports even tough I installed the UFW firewall

I have a VServer, in which I installed the firewall UFW. I scanned the Server with NMAP but I it showed a lot open Ports, which I didnt open. Is it a Bug? Or did I installed UFW false? Thank you ufw ...
-2
votes
1answer
209 views

prevent dns leak with iptables

I start openvpn service and when i connect to the server, i bash these commands: sudo iptables -A INPUT -j DROP' sudo iptables -A OUTPUT -j DROP sudo iptables -A OUTPUT -o tun0 -j ACCEPT read -p "...
0
votes
2answers
62 views

Mapping ufw rule to iptables

I'm moving from ufw to iptables. There is a default "limit" rule in ufw, which kicks in if an IP address initiates 6+ connections in 30 seconds (sudo ufw limit ssh). I use that limit rule for SSH ...
0
votes
0answers
35 views

UFW blocks port 8443 when I explicitly allow it

For whatever reason, whenever I turn on ufw, it blocks access to port 8443/tcp even though I have it explicitly allowed. For example: [root:test:~/test]# ufw status numbered Status: active To ...
0
votes
0answers
91 views

Incoming and outgoing traffic from kernel service from lan router connecting to internet

I have kali linux. I have outgoing on for ufw for port 53, https, http. All outgoing and incoming (all protocols) blocked by default. I am still getting incoming traffic from my lan which connects ...
0
votes
0answers
140 views

UFW won't start at boot

I've got a little problem with ufw on Raspbian (Debian) on my Raspberry Pi 4 B. I have it as a server with public IP. It looks like it works like it should, but after reboot the ufw is inactive. I've ...
1
vote
1answer
32 views

What does it mean if requests from a blocked IP do not show up on tcpdump?

I have a VPS with Ubuntu 16.0.4 installed on it. Every time I connected to it through SSH, the next times I attempted to connect would end up in time out errors along with any other kind of connection ...
0
votes
1answer
29 views

How can I prevent certian IP from connecting to iSCSI target server by ufw?

I set up a iSCSI target with targetcli. I would like to pass all connections to access target storage but a few IPs. I did it as below: ufw allow 3260/tcp ufw deny from 192.168.0.112 to any port 3260 ...
0
votes
1answer
20 views

UFW denies SSH even though rules allow [closed]

I have recently configured my RaspberryPi 3 to only allow connections through VPN. I would however like to open it for SSH connections from anywhere. The rules below should allow traffic on port 22, ...
0
votes
0answers
36 views

Naming / Aliasing IP addresses in UFW

I've set up UFW and things are working great. I want to restrict access to 5 distinct ports for three distinct IPs. Is there a way to either name/alias an IP, or create a group of IPs? Right now I'...
1
vote
1answer
147 views

How to block all incoming and outgoing traffic except outgoing of 80 port and 443 in ufw?

I need to unlock only outgoing 443 and 80 port, only for navigate through internet, actually im using the rules: ufw default deny incoming ufw default deny outgoing ufw allow out from any to any port ...
0
votes
0answers
27 views

How to allow a single IP in gufw for ssh?

If I make a simple rule (left image) like this: It adds two entries in rule (right image) and after restarting ufw service, I can connect to it BUT if I make an advanced rule like this (left): It ...
1
vote
1answer
148 views

Using iptables mangle & nat in ufw

I've set up a Raspberry Pi torrent server with Deluge & SABnzbd. It's all working well including Apache reverse proxy and an SSL certificate to reach it from outside my network. To increase my ...
0
votes
0answers
26 views

Add exception to UFW Firewall for python http server directory listing in Route IP 10.42.0.1 Ubuntu?

i'm trying to list a directory using this python command: sudo python3 -m http.server --bind 10.42.0.1 80 But, ufw firewall blocks the traffic of the route ip 10.42.0.1, and the devices connected to ...
1
vote
2answers
647 views

ufw blocks wireguard

I have set up wireguard and ufw using this guide. But if ufw on the vpn server is enabled it blockes some packets below (internet through the vpn on the client doesnt' work). If it is disabled it ...
1
vote
0answers
270 views

UFW Drop inbound ICMP requests from outside the local network

How do I use ufw to drop inbound icmp traffic from outside my local network? Local network/mask is 10.0.2.0/24.
1
vote
1answer
1k views

Can't log in via SSH after reboot!

I turn on firewall with ufw with "systemctl enable ufw; systemctl start ufw" and "ufw enable". Then I set it with "ufw default deny incoming" to stop the incoming traffic. In the meanwhile, I allow ...
0
votes
0answers
26 views

Cannot setup ssh server

I'm trying to setup my ssh server at home, but cannot make it work yet. I already forwarded the IP inside the router website. I have an external IP. I can access to my router's config using it. I ...
0
votes
2answers
243 views

How to get UFW to read current iptables rules after modification? (Ubuntu)

I am adding a chain using iptables: iptables -N ETDROP When I reboot, this is lost. I read of many ways to make iptables rules permanent... however You must remember, I am using UFW and UFW has ...
0
votes
1answer
147 views

How to route all incoming packets to remote proxy?

I have a Wi-Fi hotspot setup in Kali. Interface wlan0 on 10.10.10.1/24. I setup an Android (10.10.10.2) to proxy requests through Burp on port 10.10.10.1:9999. This is done in the Android's Wi-Fi ...
-3
votes
1answer
63 views

Ufw conficting with init systemd-sysv during install [closed]

I installed kali on my computer, but then I tried making it into a server, so I installed PHP, MySQL and apache2. I did some research and it told me to install UFW so I typed in the terminal: sudo ...
0
votes
0answers
25 views

Is the default state of iptables reflected in UFW?

When checking the firewall status using ufw status, does this reflect the current status of iptables or what is currently set in ufw? For example, lets say the default state of iptables blocks all ...
1
vote
1answer
538 views

Can't get ufw rules to allow dlna/upnp traffic between pc and stereo

I'm using pulseaudio-dlna+pavucontrol to direct sound output from my laptop (192.168.2.159) to my yamaha stereo (192.168.2.160) This only works when I disable ufw with sudo ufw disable I struggle to ...
0
votes
1answer
28 views

UFW Syntax to find and delete ONE rule among 4279 UFW REJECT IN rules

I've setup Fail2Ban to use UFW actions to permanently ban IPs after 1 failed attempt. What seemed like a good idea are now causing me problems as I need to remove one IP among all those ufw rules. ...
1
vote
2answers
128 views

How do I block public port(3306) access in Linux but allow from other nodes on local network?

I have a MySQL server running on port 3306 with a private IP: 10.64.30.117. I also have a web app running on another node with a private IP: 10.17.23.1. I want the web app to be able to access the ...
2
votes
0answers
74 views

Interpreting UFW log - Brother printer and 239.255.255.250

I'm using UFW and don't know what's going on here. My ufw log has many statements like this: [UFW BLOCK] IN=enp0s25 OUT= MAC=01:00:5e:7f:ff:fa:9c:30:5b:c3:df:c2:08:00 SRC=10.0.0.49 DST=239.255.255....
0
votes
1answer
55 views

How do I add UFW rules and a comment/name?

How do I open a port range, for example: xxxx-xxxx and name it something so when I get back I in a month or whatever and look at my UFW config I know what those ports are for?
0
votes
1answer
482 views

How can I configure bidirectional protocol-independent port forwarding?

I am attempting to solve the following problem: I have a system which I will henceforth refer to as "Local" that hosts a service on port 80 and port 443, and depends on sending outgoing requests on ...
-1
votes
1answer
42 views

gufw GUI fails to launch on LMDE

After upgrading from LMDE2 to LMDE3 Cindy I noticed I could no longer launch the gufw GUI. The error was: ** (gufw.py:20536): WARNING **: Failed to load shared library 'libwebkit2gtk-4.0.so.37' ...
1
vote
1answer
76 views

Arch ufw enabling

To enable UFW in Debian I do: ufw --force enable I understand from the Arch documentation that do so in Arch I should do instead: systemctl start ufw systemctl enable ufw By "enabling" I mean "...
0
votes
1answer
795 views

Understanding the combination of ufw --force enable

I rent a remote machine with Debian/Ubuntu and desire to filter all ports I don't use through iptables via ufw. The only ports I allow (both with TCP and UPD) are 22,25,80,443. If I understand man ...
0
votes
1answer
277 views

Ansible orchestration for ufw with ufw --force enable

I deploy an Ansible playbook to some debian:stable machines aiming to update package index cache, install ufw and setup it in the Ansible architecture-agnostic and version-agnostic way. - name: ...
1
vote
1answer
86 views

iptables blocking local traffic

My local machine IP: 192.168.0.35 What I did: Answer that i tried here!! sudo iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination 192.168.0.35:80 The error: Now I can not access ...
1
vote
3answers
950 views

UFW is blocking DNS requests through VPN [closed]

I have a very strange behaviour of my UFW on Ubuntu 18.04. I set up basic rules, everything is OK until I connect client to this server through VPN. On the client side ping works fine but nslookup / ...
0
votes
1answer
30 views

UFW deny specific port access over HTTPS?

We're running a dev server on some IP and have our API exposed on port 5000 and nginx listening on 80. However, the entire backend will crash when one makes an HTTPS request to port 5000. Thus, I ...
0
votes
1answer
100 views

UFW not opening ports on Fedora

I'm using UFW on Fedora Server 28 and when I allow port 80 and make sure that apache is running, no server pops up in my browser. I'm doing this via ssh, so I know the device is connected. Using nmap ...
1
vote
0answers
230 views

Purpose of UFW Allow All Rules in FORWARD chain?

What's the purpose of the allow all rules put into the FORWARD chain by UFW? They're currently messing up the 5 ACCEPT rules I've put in place underneath. Unless there's some specific valid reason ...
0
votes
1answer
410 views

UFW allow rules not working?

I have a cluster configuration with one machine that functions as a gateway (call it master) and several machines that only have private IP addresses (call them s01 to s09). I recently installed ufw ...
1
vote
1answer
474 views

How to make systemd-nspawn work with ufw firewall?

I'm running a systemd-nspawn container (Debian 9, host also Debian 9) with VirtualEthernet=yes and some ports forwarded, e.g. Port=tcp:443:443. I.e. a web server runs in the container and should be ...
0
votes
1answer
221 views

Log accepted packets with ufw

I'm using ufw on Ubuntu 18.04 LTS, and I want to log both dropped and accepted packets (I am aware this will generate a lot of logs). I can do this by increasing the ufw log level with ufw logging ...