Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ufw]

Uncomplicated Firewall (ufw) is a frontend for iptables, works as a host-based firewall and provides a framework for managing netfilter, as well as a command-line interface for manipulating the firewall.

1
vote
1answer
16 views

Arch ufw enabling

To enable UFW in Debian I do: ufw --force enable I understand from the Arch documentation that do so in Arch I should do instead: systemctl start ufw systemctl enable ufw By "enabling" I mean "...
0
votes
0answers
9 views

OpenVPN Gateway with Killswitch and Prerouting Ports

My Prerouting in UFW Doesnt work. I´m using an VPN Connection via tun0. Internet Connections via tun0 as a gateway works but not the Port Forwarding. im on debian Strech 9 UFW Before Rules. Only ...
0
votes
0answers
27 views

OpenVPN Server inside VM + VM VPN

How to setup OpenVPN Server inside VirtualboxVM running Debian on Debian Host? At Guest System OpenVPN is running to tunnel all internet Traffic to another VPN-Server. Now I want to setup an OpenVPN ...
0
votes
1answer
110 views

Understanding the combination of ufw --force enable

I rent a remote machine with Debian/Ubuntu and desire to filter all ports I don't use through iptables via ufw. The only ports I allow (both with TCP and UPD) are 22,25,80,443. If I understand man ...
0
votes
1answer
73 views

Ansible orchestration for ufw with ufw --force enable

I deploy an Ansible playbook to some debian:stable machines aiming to update package index cache, install ufw and setup it in the Ansible architecture-agnostic and version-agnostic way. - name: ...
1
vote
1answer
31 views

iptables blocking local traffic

My local machine IP: 192.168.0.35 What I did: Answer that i tried here!! sudo iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination 192.168.0.35:80 The error: Now I can not access ...
0
votes
3answers
75 views

UFW is blocking DNS requests through VPN [closed]

I have a very strange behaviour of my UFW on Ubuntu 18.04. I set up basic rules, everything is OK until I connect client to this server through VPN. On the client side ping works fine but nslookup / ...
0
votes
1answer
19 views

UFW deny specific port access over HTTPS?

We're running a dev server on some IP and have our API exposed on port 5000 and nginx listening on 80. However, the entire backend will crash when one makes an HTTPS request to port 5000. Thus, I ...
0
votes
1answer
23 views

UFW not opening ports on Fedora

I'm using UFW on Fedora Server 28 and when I allow port 80 and make sure that apache is running, no server pops up in my browser. I'm doing this via ssh, so I know the device is connected. Using nmap ...
1
vote
0answers
62 views

Purpose of UFW Allow All Rules in FORWARD chain?

What's the purpose of the allow all rules put into the FORWARD chain by UFW? They're currently messing up the 5 ACCEPT rules I've put in place underneath. Unless there's some specific valid reason ...
0
votes
1answer
43 views

UFW allow rules not working?

I have a cluster configuration with one machine that functions as a gateway (call it master) and several machines that only have private IP addresses (call them s01 to s09). I recently installed ufw ...
1
vote
1answer
136 views

How to make systemd-nspawn work with ufw firewall?

I'm running a systemd-nspawn container (Debian 9, host also Debian 9) with VirtualEthernet=yes and some ports forwarded, e.g. Port=tcp:443:443. I.e. a web server runs in the container and should be ...
0
votes
1answer
27 views

Log accepted packets with ufw

I'm using ufw on Ubuntu 18.04 LTS, and I want to log both dropped and accepted packets (I am aware this will generate a lot of logs). I can do this by increasing the ufw log level with ufw logging ...
0
votes
2answers
16 views

Configure VPS so only authenticated VPN users can access web server

I am setting up an intentionally vulnerable website to show some security stuff, but I don't want unauthorized people exploiting it. How would I be able to configure my VPS so that only people ...
0
votes
0answers
41 views

Website still loads with UFW default settings

I've installed and enabled UFW, status: active, on ubuntu 16.04 yet I can still access the website that is hosted on the VPS machine. I ran sudo ufw default deny incoming in the terminal and it ...
0
votes
0answers
270 views

Port Forwarding to OpenVPN client?

My ISP doesn't allow Port Forwarding. So I bought myself a VPS server and installed OpenVPN server on it. I want to port forward ports through this VPS to my OpenVPN client. I have followed many ...
1
vote
1answer
150 views

OpenVPN or IPtables for split tunnel control?

I have been plugging away but not luck, but from what I understand what I am trying to split tunnel. I have a VPN in place (and working) where all traffic from my LAN heads out to the internet via ...
0
votes
1answer
197 views

Allow access to Apache on both port 80 and 443 in Ubuntu 16.04

I've just installed UFW 0.35 on Ubuntu 16.04: root@localhost:/etc# ufw --version ufw 0.35 Copyright 2008-2015 Canonical Ltd. and root@localhost:/etc# ufw app list Available applications: OpenSSH ...
0
votes
1answer
47 views

ufw disable does not disable ufw on system startup

my mysql port 3306 was not accessible on one of my virtual machines runing Ubuntu 14.04 LTS. To fix it i entered sudo ufw diable and got the answer: Firewall stopped and disabled on system startup ...
0
votes
0answers
31 views

How to forward only the port I want

I've got a network: PC --> LinuxRouter --> Internet I have: 2 interfaces on LinuxRouter eth0 (192.168.1.100) is connected to internet eth1 (192.168.2.1) 1 interface on PC eth0 (192.168.2.2) I've ...
0
votes
0answers
22 views

Iptables DNAT blocking firewall host

I have a machine where I manage the firewall using UFW. I have setup a few DNAT rules. It works well from the network but not at all from the server itself: Server IP: inet 10.0.4.4/23 brd 10.0.5....
1
vote
1answer
582 views

UFW/IPTABLES not blocking DHCP UDP port 67?

I am running ubuntu 16.04. I have ufw installed and enabled. I also have isc-dhcp-server installed. I have not opened up UDP port 67, yet DHCP clients still seem to be able to obtain DHCP leases from ...
0
votes
0answers
75 views

GUFW rules gone, stays disabled

I have Linux Mint 18.3 Sylvia x86_64 based on Ubuntu Xenial and GUFW version 16.04.1-0ubuntu1.1. What happened to me is that my GUFW rules just disappeared and GUFW returns to the disabled state ...
0
votes
1answer
206 views

UFW Firewall not working? [closed]

I opened up port 8887 on a server that had it disabled using ufw allow 8887/tcp. I'm not trying to close it again. I used ufw status numbered to get a list of rules and then ufw delete <NUMBER>....
0
votes
0answers
197 views

Debian: How to make UFW active at boot

I'm trying to get ufw to activate on boot on my Debian 9 server. So for, I've tried ufw enable and systemctl enable ufw but neither make ufw enabled at boot. Any suggestions on how to make ufw ...
1
vote
1answer
699 views

Opening port not working

I have a python server running on port 8000 on a raspberry pi and would like to make it accessible within the local network, which is currently not working. The interface wlan0 is configured with ...
0
votes
0answers
134 views

UFW blocks hostname lookup on LAN for ssh and ping

I'm experiencing a problem connecting to hosts on my LAN via their hostname only when UFW is enabled. When UFW is enabled: ssh <machine> gives the message: ssh: Could not resolve hostname &...
1
vote
3answers
124 views

UFW - how to know which ports are blocked by default?

Regarding using UFW ("Uncomplicated Fire Wall") how could one know which ports are blocked by default, that is right after doing apt-get install ufw -y && ufw enable? Don't have a machine to ...
0
votes
1answer
66 views

Port is still closed after ufw

On debian, I ran ufw allow 27015 on root and ufw status showed that it was allowed. However, on a port checker tool online, it said it was closed. During this test, a server was binded to that port, ...
1
vote
1answer
97 views

Firewall configuration for NFS share of ZFS mirror

I have several Ubuntu Server 16.04 VMs. One of these is my fileserver and has a ZFS mirror. I want to mount filesystems in the mirror to various different client VMs. I can successfully do so when the ...
2
votes
1answer
339 views

How can I set up an IP-Agnostic VPN Kill Switch using ufw

Been searching for the answer, but have found nothing. Like most smart Internet users, I use a VPN. You can correct me if I'm wrong, but when I set up a VPN (using the OpenVPN protocol, at least) the ...
2
votes
1answer
67 views

Can I uninstall ufw if using iptables?

OS: Linux Mint 18.2 Cinnamon 64-bit Let's start with the status of ufw: sudo ufw status says: Status: inactive Hence, I suppose, in spite there is connection between ufw and iptables, if I am ...
0
votes
2answers
753 views

Allow ufw rule to curl localhost for a specific port

I want to allow curl -if localhost:54321 only with ufw. What rule can I apply from the command line? I have tried ufw allow proto tcp from any to any port 54321 and ufw status shows the following: ...
0
votes
2answers
800 views

GUFW returns a segmentation fault in line 13

When I run GUFW as root, it returns: No protocol specified Unable to init server: Could not connect: Connection refused No protocol specified Unable to init server: Could not connect: Connection ...
0
votes
0answers
879 views

UFW blocks traffic for one vpn connection

I configured openvpn server on openwrt. When I try to connect to the vpn server, ufw blocks traffic from my router: Sep 29 19:22:58 debian nm-openvpn[11139]: OpenVPN 2.4.3 x86_64-pc-linux-gnu [SSL (...
1
vote
0answers
178 views

Open a port on a google cloud instance without ssh access

After enabling ufw on my google cloud instance running ubuntu, I can't ssh into the instance anymore. I didn't open nor close any port, I only ran: ufw enable and restarted the machine (ufw requires ...
0
votes
1answer
500 views

How to block traffic to a different host using UFW on a router [closed]

I have ufw running on an Ubuntu 16.04 host that acts as the router between the Internet and my LAN. (I'm using ufw instead of raw iptables, because manually unblocking enough ICMPv6 to make IPv6 work ...
0
votes
0answers
437 views

“Temporary failure resolving 'security.debian.org'” despite having allowed DNS via ufw

So I denied everything except DNS, HTTPS and HTTP in the gufw firewall. ufw status verbose looks good with no DENY for port 53 and only allows at the bottom of it. I even executed sudo ufw allow 53/...
13
votes
6answers
10k views

Why does Debian come without a firewall enabled by default?

I'm using Debian 9.1 with KDE and I'm wondering why it comes without a firewall installed and enabled by default? gufw is not even in DVD1's packages. Are people expected to connect to the Internet ...
2
votes
1answer
1k views

What is kdeconnectd and how to permanently disallow it in the firewall?

What is kdeconnectd and how can I permanently prohibit it from connecting to the Internet? In the gufw firewall it shows up under "Report" where I clicked the + button after selecting it and selected ...
0
votes
1answer
3k views

UFW rules to allow SAMBA traffic on LAN

I am trying to make connections possible between my Seagate Central drive on my local area network (LAN) and my computer which has debian 9 stable. UFW is enabled on my computer and blocking any ...
0
votes
1answer
665 views

netstat is not showing port opened through ufw

I am setting up a ftp server on my Ubuntu 16. After using the following command: sudo ufw allow 21/tcp sudo ufw status verbose I can see the output that says: 21/tcp ALLOW IN Anywhere ...
0
votes
1answer
799 views

Constant UFW Block in Syslog

In reviewing my syslog, I've found that 99% of it consists of UFW BLOCK statements from 3 or 4 IP's (see below; edited for space). Is this normal? What do these entries mean? If they are safe, how can ...
1
vote
1answer
421 views

Why Linux firewall GUI Gufw not in Debian window-key search?

The guide recommends the Gufw firewall GUI. I installed it by apt gufw/oldstable,oldstable,now 12.10.0-1 all [installed] graphical user interface for ufw Typing ẁindow key + gufw, I cannot see ...
9
votes
1answer
9k views

Do you need to reload after adding a rule in ufw?

Do you need to run any of these commands: sudo ufw reload sudo ufw disable sudo ufw enable after adding a rule via sudo ufw allow?
0
votes
2answers
469 views

Unable to allow specific ip addresses in ufw

I am not able to get my ufw rules working. As far as I understand, the default behavior is to deny all incoming connections thus the command ufw allow from 192.168.4.3 to any port http should enable ...
0
votes
1answer
80 views

Are Chromium addons and UFW Firewall settings set for all users? [closed]

Are things such as Chromium addons and UFW Firewall settings automatically set for all users and future users on Linux distributions ?
1
vote
2answers
937 views

I enabled ufw in an aws instance. How to stop that?

I enabled ufw within the server instance, when connected through ssh. But now, I am not able to connect to the server in any way. Is there a way to disable the ufw in the server? I couldnt find any ...
0
votes
0answers
537 views

Block Port 80 for OpenVPN Clients

I have an OpenVPN server running on my Raspberry Pi. I want to block all HTTP traffic for the VPN clients. I can deny outgoing traffic in UFW, but this only seems to affect the Raspberry Pi itself, ...
0
votes
1answer
738 views

ufw logs too much stuff, how can I disable that?

I happen to find out that syslog.1 takes 27 Gb and the logs in it have been inserted by the firewall ufw. How can I disable or reduce logging that much stuff into syslog by ufw?