Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ufw]

Uncomplicated Firewall (ufw) is a frontend for iptables, works as a host-based firewall and provides a framework for managing netfilter, as well as a command-line interface for manipulating the firewall.

1
vote
1answer
20 views

Can't get ufw rules to allow dlna/upnp traffic between pc and stereo

I'm using pulseaudio-dlna+pavucontrol to direct sound output from my laptop (192.168.2.159) to my yamaha stereo (192.168.2.160) This only works when I disable ufw with sudo ufw disable I struggle to ...
0
votes
1answer
16 views

UFW Syntax to find and delete ONE rule among 4279 UFW REJECT IN rules

I've setup Fail2Ban to use UFW actions to permanently ban IPs after 1 failed attempt. What seemed like a good idea are now causing me problems as I need to remove one IP among all those ufw rules. ...
1
vote
2answers
35 views

How do I block public port(3306) access in Linux but allow from other nodes on local network?

I have a MySQL server running on port 3306 with a private IP: 10.64.30.117. I also have a web app running on another node with a private IP: 10.17.23.1. I want the web app to be able to access the ...
2
votes
0answers
48 views

Interpreting UFW log - Brother printer and 239.255.255.250

I'm using UFW and don't know what's going on here. My ufw log has many statements like this: [UFW BLOCK] IN=enp0s25 OUT= MAC=01:00:5e:7f:ff:fa:9c:30:5b:c3:df:c2:08:00 SRC=10.0.0.49 DST=239.255.255....
0
votes
1answer
7 views

How do I add UFW rules and a comment/name?

How do I open a port range, for example: xxxx-xxxx and name it something so when I get back I in a month or whatever and look at my UFW config I know what those ports are for?
0
votes
1answer
53 views

How can I configure bidirectional protocol-independent port forwarding?

I am attempting to solve the following problem: I have a system which I will henceforth refer to as "Local" that hosts a service on port 80 and port 443, and depends on sending outgoing requests on ...
-1
votes
1answer
25 views

gufw GUI fails to launch on LMDE

After upgrading from LMDE2 to LMDE3 Cindy I noticed I could no longer launch the gufw GUI. The error was: ** (gufw.py:20536): WARNING **: Failed to load shared library 'libwebkit2gtk-4.0.so.37' ...
0
votes
0answers
13 views

Can't connect to OpenLDAP

i have installed iRedMail with OpenLDAP managing the Mail Accounts. So far that works. Now I wan't to connect other applications to that LDAP and I'm trying to use a LDAP Explorer "LDAP Admin" for ...
1
vote
1answer
44 views

Arch ufw enabling

To enable UFW in Debian I do: ufw --force enable I understand from the Arch documentation that do so in Arch I should do instead: systemctl start ufw systemctl enable ufw By "enabling" I mean "...
0
votes
0answers
13 views

OpenVPN Gateway with Killswitch and Prerouting Ports

My Prerouting in UFW Doesnt work. I´m using an VPN Connection via tun0. Internet Connections via tun0 as a gateway works but not the Port Forwarding. im on debian Strech 9 UFW Before Rules. Only ...
0
votes
0answers
105 views

OpenVPN Server inside VM + VM VPN

How to setup OpenVPN Server inside VirtualboxVM running Debian on Debian Host? At Guest System OpenVPN is running to tunnel all internet Traffic to another VPN-Server. Now I want to setup an OpenVPN ...
0
votes
1answer
275 views

Understanding the combination of ufw --force enable

I rent a remote machine with Debian/Ubuntu and desire to filter all ports I don't use through iptables via ufw. The only ports I allow (both with TCP and UPD) are 22,25,80,443. If I understand man ...
0
votes
1answer
105 views

Ansible orchestration for ufw with ufw --force enable

I deploy an Ansible playbook to some debian:stable machines aiming to update package index cache, install ufw and setup it in the Ansible architecture-agnostic and version-agnostic way. - name: ...
1
vote
1answer
54 views

iptables blocking local traffic

My local machine IP: 192.168.0.35 What I did: Answer that i tried here!! sudo iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination 192.168.0.35:80 The error: Now I can not access ...
1
vote
3answers
349 views

UFW is blocking DNS requests through VPN [closed]

I have a very strange behaviour of my UFW on Ubuntu 18.04. I set up basic rules, everything is OK until I connect client to this server through VPN. On the client side ping works fine but nslookup / ...
0
votes
1answer
24 views

UFW deny specific port access over HTTPS?

We're running a dev server on some IP and have our API exposed on port 5000 and nginx listening on 80. However, the entire backend will crash when one makes an HTTPS request to port 5000. Thus, I ...
0
votes
1answer
38 views

UFW not opening ports on Fedora

I'm using UFW on Fedora Server 28 and when I allow port 80 and make sure that apache is running, no server pops up in my browser. I'm doing this via ssh, so I know the device is connected. Using nmap ...
1
vote
0answers
141 views

Purpose of UFW Allow All Rules in FORWARD chain?

What's the purpose of the allow all rules put into the FORWARD chain by UFW? They're currently messing up the 5 ACCEPT rules I've put in place underneath. Unless there's some specific valid reason ...
0
votes
1answer
137 views

UFW allow rules not working?

I have a cluster configuration with one machine that functions as a gateway (call it master) and several machines that only have private IP addresses (call them s01 to s09). I recently installed ufw ...
1
vote
1answer
232 views

How to make systemd-nspawn work with ufw firewall?

I'm running a systemd-nspawn container (Debian 9, host also Debian 9) with VirtualEthernet=yes and some ports forwarded, e.g. Port=tcp:443:443. I.e. a web server runs in the container and should be ...
0
votes
1answer
49 views

Log accepted packets with ufw

I'm using ufw on Ubuntu 18.04 LTS, and I want to log both dropped and accepted packets (I am aware this will generate a lot of logs). I can do this by increasing the ufw log level with ufw logging ...
0
votes
2answers
21 views

Configure VPS so only authenticated VPN users can access web server

I am setting up an intentionally vulnerable website to show some security stuff, but I don't want unauthorized people exploiting it. How would I be able to configure my VPS so that only people ...
0
votes
0answers
43 views

Website still loads with UFW default settings

I've installed and enabled UFW, status: active, on ubuntu 16.04 yet I can still access the website that is hosted on the VPS machine. I ran sudo ufw default deny incoming in the terminal and it ...
1
vote
1answer
257 views

OpenVPN or IPtables for split tunnel control?

I have been plugging away but not luck, but from what I understand what I am trying to split tunnel. I have a VPN in place (and working) where all traffic from my LAN heads out to the internet via ...
0
votes
1answer
851 views

Allow access to Apache on both port 80 and 443 in Ubuntu 16.04

I've just installed UFW 0.35 on Ubuntu 16.04: root@localhost:/etc# ufw --version ufw 0.35 Copyright 2008-2015 Canonical Ltd. and root@localhost:/etc# ufw app list Available applications: OpenSSH ...
0
votes
1answer
102 views

ufw disable does not disable ufw on system startup

my mysql port 3306 was not accessible on one of my virtual machines runing Ubuntu 14.04 LTS. To fix it i entered sudo ufw diable and got the answer: Firewall stopped and disabled on system startup ...
0
votes
0answers
38 views

How to forward only the port I want

I've got a network: PC --> LinuxRouter --> Internet I have: 2 interfaces on LinuxRouter eth0 (192.168.1.100) is connected to internet eth1 (192.168.2.1) 1 interface on PC eth0 (192.168.2.2) I've ...
0
votes
0answers
26 views

Iptables DNAT blocking firewall host

I have a machine where I manage the firewall using UFW. I have setup a few DNAT rules. It works well from the network but not at all from the server itself: Server IP: inet 10.0.4.4/23 brd 10.0.5....
1
vote
1answer
1k views

UFW/IPTABLES not blocking DHCP UDP port 67?

I am running ubuntu 16.04. I have ufw installed and enabled. I also have isc-dhcp-server installed. I have not opened up UDP port 67, yet DHCP clients still seem to be able to obtain DHCP leases from ...
0
votes
1answer
341 views

UFW Firewall not working? [closed]

I opened up port 8887 on a server that had it disabled using ufw allow 8887/tcp. I'm not trying to close it again. I used ufw status numbered to get a list of rules and then ufw delete <NUMBER>....
1
vote
1answer
1k views

Opening port not working

I have a python server running on port 8000 on a raspberry pi and would like to make it accessible within the local network, which is currently not working. The interface wlan0 is configured with ...
0
votes
0answers
188 views

UFW blocks hostname lookup on LAN for ssh and ping

I'm experiencing a problem connecting to hosts on my LAN via their hostname only when UFW is enabled. When UFW is enabled: ssh <machine> gives the message: ssh: Could not resolve hostname &...
1
vote
3answers
160 views

UFW - how to know which ports are blocked by default?

Regarding using UFW ("Uncomplicated Fire Wall") how could one know which ports are blocked by default, that is right after doing apt-get install ufw -y && ufw enable? Don't have a machine to ...
0
votes
1answer
77 views

Port is still closed after ufw

On debian, I ran ufw allow 27015 on root and ufw status showed that it was allowed. However, on a port checker tool online, it said it was closed. During this test, a server was binded to that port, ...
1
vote
1answer
136 views

Firewall configuration for NFS share of ZFS mirror

I have several Ubuntu Server 16.04 VMs. One of these is my fileserver and has a ZFS mirror. I want to mount filesystems in the mirror to various different client VMs. I can successfully do so when the ...
2
votes
1answer
385 views

How can I set up an IP-Agnostic VPN Kill Switch using ufw

Been searching for the answer, but have found nothing. Like most smart Internet users, I use a VPN. You can correct me if I'm wrong, but when I set up a VPN (using the OpenVPN protocol, at least) the ...
2
votes
1answer
82 views

Can I uninstall ufw if using iptables?

OS: Linux Mint 18.2 Cinnamon 64-bit Let's start with the status of ufw: sudo ufw status says: Status: inactive Hence, I suppose, in spite there is connection between ufw and iptables, if I am ...
0
votes
2answers
1k views

Allow ufw rule to curl localhost for a specific port

I want to allow curl -if localhost:54321 only with ufw. What rule can I apply from the command line? I have tried ufw allow proto tcp from any to any port 54321 and ufw status shows the following: ...
1
vote
2answers
988 views

GUFW returns a segmentation fault in line 13

When I run GUFW as root, it returns: No protocol specified Unable to init server: Could not connect: Connection refused No protocol specified Unable to init server: Could not connect: Connection ...
0
votes
0answers
1k views

UFW blocks traffic for one vpn connection

I configured openvpn server on openwrt. When I try to connect to the vpn server, ufw blocks traffic from my router: Sep 29 19:22:58 debian nm-openvpn[11139]: OpenVPN 2.4.3 x86_64-pc-linux-gnu [SSL (...
1
vote
0answers
208 views

Open a port on a google cloud instance without ssh access

After enabling ufw on my google cloud instance running ubuntu, I can't ssh into the instance anymore. I didn't open nor close any port, I only ran: ufw enable and restarted the machine (ufw requires ...
0
votes
1answer
572 views

How to block traffic to a different host using UFW on a router [closed]

I have ufw running on an Ubuntu 16.04 host that acts as the router between the Internet and my LAN. (I'm using ufw instead of raw iptables, because manually unblocking enough ICMPv6 to make IPv6 work ...
0
votes
0answers
506 views

“Temporary failure resolving 'security.debian.org'” despite having allowed DNS via ufw

So I denied everything except DNS, HTTPS and HTTP in the gufw firewall. ufw status verbose looks good with no DENY for port 53 and only allows at the bottom of it. I even executed sudo ufw allow 53/...
13
votes
6answers
12k views

Why does Debian come without a firewall enabled by default?

I'm using Debian 9.1 with KDE and I'm wondering why it comes without a firewall installed and enabled by default? gufw is not even in DVD1's packages. Are people expected to connect to the Internet ...
2
votes
1answer
2k views

What is kdeconnectd and how to permanently disallow it in the firewall?

What is kdeconnectd and how can I permanently prohibit it from connecting to the Internet? In the gufw firewall it shows up under "Report" where I clicked the + button after selecting it and selected ...
0
votes
1answer
3k views

UFW rules to allow SAMBA traffic on LAN

I am trying to make connections possible between my Seagate Central drive on my local area network (LAN) and my computer which has debian 9 stable. UFW is enabled on my computer and blocking any ...
0
votes
1answer
828 views

netstat is not showing port opened through ufw

I am setting up a ftp server on my Ubuntu 16. After using the following command: sudo ufw allow 21/tcp sudo ufw status verbose I can see the output that says: 21/tcp ALLOW IN Anywhere ...
0
votes
1answer
1k views

Constant UFW Block in Syslog

In reviewing my syslog, I've found that 99% of it consists of UFW BLOCK statements from 3 or 4 IP's (see below; edited for space). Is this normal? What do these entries mean? If they are safe, how can ...
1
vote
1answer
474 views

Why Linux firewall GUI Gufw not in Debian window-key search?

The guide recommends the Gufw firewall GUI. I installed it by apt gufw/oldstable,oldstable,now 12.10.0-1 all [installed] graphical user interface for ufw Typing ẁindow key + gufw, I cannot see ...
13
votes
1answer
13k views

Do you need to reload after adding a rule in ufw?

Do you need to run any of these commands: sudo ufw reload sudo ufw disable sudo ufw enable after adding a rule via sudo ufw allow?