Questions tagged [ufw]

Uncomplicated Firewall (ufw) is a frontend for iptables, works as a host-based firewall and provides a framework for managing netfilter, as well as a command-line interface for manipulating the firewall.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

UFW kills SSH access on reboot

I'm trying to block all connectivity except what's required for a SSH server to function using the following commands on a freshly installed ubuntu 18.04 server: sudo ufw allow ssh sudo ufw default ...
0
votes
0answers
7 views

How to: Linphone network ports for firewall

After some experimentation, I have found that the following ports need to be opened on the host firewall: Linphone dynamic port range: 10000-17000 (I have not seen anything yet outside of this) ...
0
votes
0answers
9 views

Can't start fail2ban with banaction = ufw

After I change banaction = iptables-multiport to banaction = ufw in /etc/fail2ban/jail.local, the fail2ban service fails to start. How to use ufw as a banaction in debain 10?
0
votes
0answers
32 views

UFW allow SSH on non-standard port to IPv6 addresses

I want to open my UFW firewall to SSH on port 1234 while denying access to all through port 22. My LAN DNS is resolving to IPv6 addresses and I don't want to change that. I'm having trouble forming ...
1
vote
0answers
59 views

How to run graphical applications as root under wayland

Under the new Wayland display server, several applications requiring root permission fail to run. I actually have an answer (one way of working around the issue). I welcome any better solutions or ...
0
votes
1answer
18 views

post-up and post-down ufw equivalent

Typically the /etc/network/interfaces file on Debian can include routing requirements such as post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE post-down iptables -t ...
0
votes
0answers
17 views

How firewall works in Ubuntu 18.04?

I want to know what is my problem. First of all I set VPN server for Wireguard and Shadowsocks that use some ports such as 51820 and 8000. Then I set some rules inside iptables for input and output ...
0
votes
1answer
53 views

ufw installation error on Raspberry Pi

I am on a Raspberry Pi trying to install the ufw package and have been getting this error I have no idea how to deal with. After running sudo apt install ufw I get these errors: Reading package ...
0
votes
0answers
25 views

Vagrant Enable UFW Firewall During Provisioning

I would like to configure the firewall using UFW to allow only connections from the localhost: This is the provisioning section in the Vagrantfile for hashicorp/bionic64: config.vm.provision "...
0
votes
1answer
55 views

Why do I get connection refused when I telnet port 2194?

I'm setting up an OpenVPN access server and I continuously get the error "connection refused" on my client(s). So i decided to start debugging from the beginning (the server) and tried telnet 127.0.0....
0
votes
2answers
34 views

CURL timeout on remote machine after enabling UFW on server

I have two machines. On the primary machine, I have UFW enabled. From the client machine, if I issue the folloing command, I am getting a timeout curl 192.168.15.212:8080/colibri/stats There is a ...
0
votes
1answer
26 views

How to setup port forwarding between two public servers (ufw, debian)

I have SERVER1 and SERVER2. Both Debian9, both with ufw. I have net.ipv4.ip_forward=1 enabled on both servers. SERVER1 have Apache2 running on ports 80 and 443. I need to forward ports 80 and 443 ...
0
votes
0answers
8 views

FTP timing out when enabling ufw

I created a FTP server using vsftpd. So far, I've got it working using plain FTP. My next goal is to setup SSL/TLS. I have the configuration ready in the config, but first I wanted to get the firewall ...
0
votes
1answer
55 views

Ubuntu ufw Lightsail not opening port 80 [duplicate]

I have port 80 open from AWS lightsail console, and ufw status shows that port 80 should be open. And yet, I cannot curl into port 80 nor can I telnet or ping or launch a server. I've checked ...
1
vote
2answers
1k views

ufw not working on debian

I'm trying to install ufw on my debian buster machine and get it to work. I already installed it using apt-get and if I try to do so again it says > ufw is already the newest version (0.36-1) So ...
1
vote
0answers
51 views

How to block ubuntu internet access?

I would like to block internet access in the browser (firefox) but when trying to do it with ufw it simply does nothing, try sudo ufw deny 80 sudo ufw deny 8080 sudo ufw deny 443 but nothing, will ...
0
votes
0answers
181 views

Why ufw blocks connection when they're allowed?

I have the following set of rules sudo ufw status numbered Status: active To Action From -- ------ ---- [ 1] 41337/tcp ...
0
votes
0answers
28 views

SSH to VPS works from specific IP but fails with Mobile Data (3G/4G)

The VPS (remote location) has UFW installed and the issue is that when I connect from my own computer / every device connected to my router it works perfectly fine but as soon as I use my phone's data ...
0
votes
0answers
110 views

UFW IPTables Port Forwarding to OpenVPN client

Let's say: Server with public ip 68.100.100.100 (has the OpenVPN server) Backend with a private ip tun0 10.8.0.6 (OpenVPN client connected to the Server' OpenVPN server) Client with ip 170.170.170....
1
vote
1answer
1k views

How should i enable UFW: through “systemctl enable” or “ufw enable”?

I know two ways to start UFW: through systemctl and through ufw itself. For example, when i use systemctl enable ufw, i get this status: systemctl status ufw ● ufw.service - CLI Netfilter Manager ...
0
votes
1answer
1k views

Allow UFW rules in specific IP range

I need to setup some firewall rules but I do not want to open them to public since I am running an nginx server, how can I allow the follow rules only locally from IP address 192.168.178.0 to .64? ...
1
vote
1answer
258 views

Why does UFW use a different sysctl.conf file?

There are a lot of network-related settings in /etc/sysctl.conf and a number of files in /etc/sysctl.d/. My data centre operator who has preconfigured the Ubuntu OS to work best in their environment ...
1
vote
2answers
548 views

ufw & iptables don't block incoming connection

I enable ufw and I tried to block all the traffic from one server, but I can't. It only blocks ssh, all the other ports are open. I test it with telnet. I want to allow all ports for some IPs, and ...
1
vote
1answer
184 views

Unable to make mosh work when ufw is enabled [closed]

I have a RPi running ArchLinux where I can login with mosh when ufw is disabled, but it doesn't work when it's enabled. This is my ufw setup: ❯ sudo ufw status numbered Status: active To ...
0
votes
1answer
65 views

NMAP shows open ports even tough I installed the UFW firewall

I have a VServer, in which I installed the firewall UFW. I scanned the Server with NMAP but I it showed a lot open Ports, which I didnt open. Is it a Bug? Or did I installed UFW false? Thank you ufw ...
-2
votes
1answer
497 views

prevent dns leak with iptables

I start openvpn service and when i connect to the server, i bash these commands: sudo iptables -A INPUT -j DROP' sudo iptables -A OUTPUT -j DROP sudo iptables -A OUTPUT -o tun0 -j ACCEPT read -p "...
0
votes
2answers
113 views

Mapping ufw rule to iptables

I'm moving from ufw to iptables. There is a default "limit" rule in ufw, which kicks in if an IP address initiates 6+ connections in 30 seconds (sudo ufw limit ssh). I use that limit rule for SSH ...
0
votes
0answers
91 views

UFW blocks port 8443 when I explicitly allow it

For whatever reason, whenever I turn on ufw, it blocks access to port 8443/tcp even though I have it explicitly allowed. For example: [root:test:~/test]# ufw status numbered Status: active To ...
1
vote
0answers
329 views

UFW won't start at boot

I've got a little problem with ufw on Raspbian (Debian) on my Raspberry Pi 4 B. I have it as a server with public IP. It looks like it works like it should, but after reboot the ufw is inactive. I've ...
1
vote
1answer
77 views

What does it mean if requests from a blocked IP do not show up on tcpdump?

I have a VPS with Ubuntu 16.0.4 installed on it. Every time I connected to it through SSH, the next times I attempted to connect would end up in time out errors along with any other kind of connection ...
0
votes
1answer
46 views

How can I prevent certian IP from connecting to iSCSI target server by ufw?

I set up a iSCSI target with targetcli. I would like to pass all connections to access target storage but a few IPs. I did it as below: ufw allow 3260/tcp ufw deny from 192.168.0.112 to any port 3260 ...
0
votes
1answer
32 views

UFW denies SSH even though rules allow [closed]

I have recently configured my RaspberryPi 3 to only allow connections through VPN. I would however like to open it for SSH connections from anywhere. The rules below should allow traffic on port 22, ...
1
vote
0answers
78 views

Naming / Aliasing IP addresses in UFW

I've set up UFW and things are working great. I want to restrict access to 5 distinct ports for three distinct IPs. Is there a way to either name/alias an IP, or create a group of IPs? Right now I'...
1
vote
1answer
436 views

How to block all incoming and outgoing traffic except outgoing of 80 port and 443 in ufw?

I need to unlock only outgoing 443 and 80 port, only for navigate through internet, actually im using the rules: ufw default deny incoming ufw default deny outgoing ufw allow out from any to any port ...
1
vote
1answer
274 views

Using iptables mangle & nat in ufw

I've set up a Raspberry Pi torrent server with Deluge & SABnzbd. It's all working well including Apache reverse proxy and an SSL certificate to reach it from outside my network. To increase my ...
4
votes
2answers
3k views

ufw blocks wireguard

I have set up wireguard and ufw using this guide. If ufw on the vpn server is enabled, it blocks some packets below (internet through the vpn on the client doesn't work). If ufw is disabled, the ...
1
vote
0answers
472 views

UFW Drop inbound ICMP requests from outside the local network

How do I use ufw to drop inbound icmp traffic from outside my local network? Local network/mask is 10.0.2.0/24.
2
votes
1answer
4k views

Can't log in via SSH after reboot!

I turn on firewall with ufw with "systemctl enable ufw; systemctl start ufw" and "ufw enable". Then I set it with "ufw default deny incoming" to stop the incoming traffic. In the meanwhile, I allow ...
0
votes
0answers
26 views

Cannot setup ssh server

I'm trying to setup my ssh server at home, but cannot make it work yet. I already forwarded the IP inside the router website. I have an external IP. I can access to my router's config using it. I ...
0
votes
2answers
583 views

How to get UFW to read current iptables rules after modification? (Ubuntu)

I am adding a chain using iptables: iptables -N ETDROP When I reboot, this is lost. I read of many ways to make iptables rules permanent... however You must remember, I am using UFW and UFW has ...
0
votes
1answer
249 views

How to route all incoming packets to remote proxy?

I have a Wi-Fi hotspot setup in Kali. Interface wlan0 on 10.10.10.1/24. I setup an Android (10.10.10.2) to proxy requests through Burp on port 10.10.10.1:9999. This is done in the Android's Wi-Fi ...
-3
votes
1answer
79 views

Ufw conficting with init systemd-sysv during install [closed]

I installed kali on my computer, but then I tried making it into a server, so I installed PHP, MySQL and apache2. I did some research and it told me to install UFW so I typed in the terminal: sudo ...
2
votes
1answer
1k views

Can't get ufw rules to allow dlna/upnp traffic between pc and stereo

I'm using pulseaudio-dlna+pavucontrol to direct sound output from my laptop (192.168.2.159) to my yamaha stereo (192.168.2.160) This only works when I disable ufw with sudo ufw disable I struggle to ...
0
votes
1answer
35 views

UFW Syntax to find and delete ONE rule among 4279 UFW REJECT IN rules

I've setup Fail2Ban to use UFW actions to permanently ban IPs after 1 failed attempt. What seemed like a good idea are now causing me problems as I need to remove one IP among all those ufw rules. ...
1
vote
2answers
381 views

How do I block public port(3306) access in Linux but allow from other nodes on local network?

I have a MySQL server running on port 3306 with a private IP: 10.64.30.117. I also have a web app running on another node with a private IP: 10.17.23.1. I want the web app to be able to access the ...
2
votes
0answers
90 views

Interpreting UFW log - Brother printer and 239.255.255.250

I'm using UFW and don't know what's going on here. My ufw log has many statements like this: [UFW BLOCK] IN=enp0s25 OUT= MAC=01:00:5e:7f:ff:fa:9c:30:5b:c3:df:c2:08:00 SRC=10.0.0.49 DST=239.255.255....
0
votes
1answer
278 views

How do I add UFW rules and a comment/name?

How do I open a port range, for example: xxxx-xxxx and name it something so when I get back I in a month or whatever and look at my UFW config I know what those ports are for?
1
vote
1answer
880 views

How can I configure bidirectional protocol-independent port forwarding?

I am attempting to solve the following problem: I have a system which I will henceforth refer to as "Local" that hosts a service on port 80 and port 443, and depends on sending outgoing requests on ...
-1
votes
1answer
68 views

gufw GUI fails to launch on LMDE

After upgrading from LMDE2 to LMDE3 Cindy I noticed I could no longer launch the gufw GUI. The error was: ** (gufw.py:20536): WARNING **: Failed to load shared library 'libwebkit2gtk-4.0.so.37' ...
1
vote
1answer
106 views

Arch ufw enabling

To enable UFW in Debian I do: ufw --force enable I understand from the Arch documentation that do so in Arch I should do instead: systemctl start ufw systemctl enable ufw By "enabling" I mean "...