Questions tagged [ufw]

Uncomplicated Firewall (ufw) is a frontend for iptables, works as a host-based firewall and provides a framework for managing netfilter, as well as a command-line interface for manipulating the firewall.

44 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
772 views

Why doesn't ufw enforce firewall rules for traffic coming from Virtualbox VM

I've been running Linux Mint 17 on my laptop for a while and thought I had it locked down to not allow any incoming traffic through "Firewall Configuration" (ufw GUI)—I have also validated this from ...
2
votes
0answers
76 views

Interpreting UFW log - Brother printer and 239.255.255.250

I'm using UFW and don't know what's going on here. My ufw log has many statements like this: [UFW BLOCK] IN=enp0s25 OUT= MAC=01:00:5e:7f:ff:fa:9c:30:5b:c3:df:c2:08:00 SRC=10.0.0.49 DST=239.255.255....
2
votes
1answer
526 views

OpenVPN or IPtables for split tunnel control?

I have been plugging away but not luck, but from what I understand what I am trying to split tunnel. I have a VPN in place (and working) where all traffic from my LAN heads out to the internet via ...
2
votes
0answers
496 views

how to forward all UDP traffic to VPN client IP with ufw

I'm using sipgate with freepbx and I've got down to what I presume is the final hurdle with the one-way audio issue. From everything I've read the issue points to NAT. I need to forward all UDP ...
2
votes
1answer
346 views

Why does mounting external harddrive trigger a UFW event?

Today I noticed when I plug in my 2TB external Toshiba hard drive, it triggers a ufw event in my logs: Jul 20 11:24:20 linuxbox kernel: [152873.728277] [UFW BLOCK] IN=inet1 OUT= MAC= SRC=xxxa DST=...
2
votes
1answer
435 views

How to properly port forwarding between different machines using UFW / iptables and DD-Wrt?

This is my network I want to see my ip_camera (192.168.3.4:80) from outside my house. It is on dd-wrt router (192.168.3.1) without internet. The router 192.168.1.1 has internet. However, i have a ...
1
vote
0answers
39 views

How to block ubuntu internet access?

I would like to block internet access in the browser (firefox) but when trying to do it with ufw it simply does nothing, try sudo ufw deny 80 sudo ufw deny 8080 sudo ufw deny 443 but nothing, will ...
1
vote
1answer
328 views

How should i enable UFW: through “systemctl enable” or “ufw enable”?

I know two ways to start UFW: through systemctl and through ufw itself. For example, when i use systemctl enable ufw, i get this status: systemctl status ufw ● ufw.service - CLI Netfilter Manager ...
1
vote
0answers
44 views

Naming / Aliasing IP addresses in UFW

I've set up UFW and things are working great. I want to restrict access to 5 distinct ports for three distinct IPs. Is there a way to either name/alias an IP, or create a group of IPs? Right now I'...
1
vote
1answer
217 views

How to block all incoming and outgoing traffic except outgoing of 80 port and 443 in ufw?

I need to unlock only outgoing 443 and 80 port, only for navigate through internet, actually im using the rules: ufw default deny incoming ufw default deny outgoing ufw allow out from any to any port ...
1
vote
2answers
1k views

ufw blocks wireguard

I have set up wireguard and ufw using this guide. But if ufw on the vpn server is enabled it blockes some packets below (internet through the vpn on the client doesnt' work). If it is disabled it ...
1
vote
0answers
382 views

UFW Drop inbound ICMP requests from outside the local network

How do I use ufw to drop inbound icmp traffic from outside my local network? Local network/mask is 10.0.2.0/24.
1
vote
0answers
245 views

Purpose of UFW Allow All Rules in FORWARD chain?

What's the purpose of the allow all rules put into the FORWARD chain by UFW? They're currently messing up the 5 ACCEPT rules I've put in place underneath. Unless there's some specific valid reason ...
1
vote
0answers
246 views

Open a port on a google cloud instance without ssh access

After enabling ufw on my google cloud instance running ubuntu, I can't ssh into the instance anymore. I didn't open nor close any port, I only ran: ufw enable and restarted the machine (ufw requires ...
1
vote
1answer
845 views

How to add multiple user.rules in ufw?

I know you can add rules one by one. But is there a way to add rules in one go - For instance, this is how you add rules in ufw in Debian - $ sudo ufw allow 80/tcp $ sudo ufw allow 443/tcp $ sudo ...
1
vote
0answers
152 views

What does this UFW entry mean?

I've found this recent entry in ufw.log: RaspberryPi kernel: [1046588.133562] [UFW BLOCK] IN=wlan0 OUT= MAC=mac_address SRC=0.0.0.0 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 My ...
1
vote
0answers
202 views

Unable to access http server when ufw is running, on Raspbian?

I have a Raspberry Pi running Raspbian, with Apache2 for the web server. Some recent change seems to have broken my ability to access my web server, when ufw is running. The server simply doesn't ...
1
vote
1answer
415 views

UFW: Allow traffic only from a dynamic IP on its last 2 elements

I am trying to setup the following rule on ufw: ufw allow from 217.87.123.0/24 So to allow incoming connections from all 217.87.123.* addresses. The problem is that my IP does not always start with ...
1
vote
0answers
254 views

UFW Preventing Web Browsing

I have the following rule set configured using UFW on Debian Jessie 8.2.0: Status: active Logging: on (low) Default: deny (incoming), deny (outgoing) New profiles: skip To ...
1
vote
0answers
780 views

ufw firewall - how to only “allow” when I am going through a proxy

I am using a proxy to navigate on internet, and I am trying to setup a firewall that will only let me connect to internet via this proxy: if I forgot to turn on the proxy, that I should not be able ...
0
votes
0answers
7 views

FTP timing out when enabling ufw

I created a FTP server using vsftpd. So far, I've got it working using plain FTP. My next goal is to setup SSL/TLS. I have the configuration ready in the config, but first I wanted to get the firewall ...
0
votes
0answers
10 views

Ubuntu ufw Lightsail not opening port 80

I have port 80 open from AWS lightsail console, and ufw status shows that port 80 should be open. And yet, I cannot curl into port 80 nor can I telnet or ping or launch a server. I've checked ...
0
votes
2answers
125 views

ufw not working on debian

I'm trying to install ufw on my debian buster machine and get it to work. I already installed it using apt-get and if I try to do so again it says > ufw is already the newest version (0.36-1) So ...
0
votes
0answers
50 views

Why ufw blocks connection when they're allowed?

I have the following set of rules sudo ufw status numbered Status: active To Action From -- ------ ---- [ 1] 41337/tcp ...
0
votes
0answers
20 views

SSH to VPS works from specific IP but fails with Mobile Data (3G/4G)

The VPS (remote location) has UFW installed and the issue is that when I connect from my own computer / every device connected to my router it works perfectly fine but as soon as I use my phone's data ...
0
votes
0answers
60 views

UFW IPTables Port Forwarding to OpenVPN client

Let's say: Server with public ip 68.100.100.100 (has the OpenVPN server) Backend with a private ip tun0 10.8.0.6 (OpenVPN client connected to the Server' OpenVPN server) Client with ip 170.170.170....
0
votes
1answer
396 views

Allow UFW rules in specific IP range

I need to setup some firewall rules but I do not want to open them to public since I am running an nginx server, how can I allow the follow rules only locally from IP address 192.168.178.0 to .64? ...
0
votes
0answers
50 views

UFW blocks port 8443 when I explicitly allow it

For whatever reason, whenever I turn on ufw, it blocks access to port 8443/tcp even though I have it explicitly allowed. For example: [root:test:~/test]# ufw status numbered Status: active To ...
0
votes
0answers
117 views

Incoming and outgoing traffic from kernel service from lan router connecting to internet

I have kali linux. I have outgoing on for ufw for port 53, https, http. All outgoing and incoming (all protocols) blocked by default. I am still getting incoming traffic from my lan which connects ...
0
votes
0answers
202 views

UFW won't start at boot

I've got a little problem with ufw on Raspbian (Debian) on my Raspberry Pi 4 B. I have it as a server with public IP. It looks like it works like it should, but after reboot the ufw is inactive. I've ...
0
votes
1answer
30 views

How can I prevent certian IP from connecting to iSCSI target server by ufw?

I set up a iSCSI target with targetcli. I would like to pass all connections to access target storage but a few IPs. I did it as below: ufw allow 3260/tcp ufw deny from 192.168.0.112 to any port 3260 ...
0
votes
0answers
28 views

How to allow a single IP in gufw for ssh?

If I make a simple rule (left image) like this: It adds two entries in rule (right image) and after restarting ufw service, I can connect to it BUT if I make an advanced rule like this (left): It ...
0
votes
0answers
30 views

Add exception to UFW Firewall for python http server directory listing in Route IP 10.42.0.1 Ubuntu?

i'm trying to list a directory using this python command: sudo python3 -m http.server --bind 10.42.0.1 80 But, ufw firewall blocks the traffic of the route ip 10.42.0.1, and the devices connected to ...
0
votes
0answers
26 views

Cannot setup ssh server

I'm trying to setup my ssh server at home, but cannot make it work yet. I already forwarded the IP inside the router website. I have an external IP. I can access to my router's config using it. I ...
0
votes
1answer
170 views

How to route all incoming packets to remote proxy?

I have a Wi-Fi hotspot setup in Kali. Interface wlan0 on 10.10.10.1/24. I setup an Android (10.10.10.2) to proxy requests through Burp on port 10.10.10.1:9999. This is done in the Android's Wi-Fi ...
0
votes
0answers
26 views

Is the default state of iptables reflected in UFW?

When checking the firewall status using ufw status, does this reflect the current status of iptables or what is currently set in ufw? For example, lets say the default state of iptables blocks all ...
0
votes
1answer
257 views

Log accepted packets with ufw

I'm using ufw on Ubuntu 18.04 LTS, and I want to log both dropped and accepted packets (I am aware this will generate a lot of logs). I can do this by increasing the ufw log level with ufw logging ...
0
votes
2answers
38 views

Configure VPS so only authenticated VPN users can access web server

I am setting up an intentionally vulnerable website to show some security stuff, but I don't want unauthorized people exploiting it. How would I be able to configure my VPS so that only people ...
0
votes
1answer
402 views

ufw disable does not disable ufw on system startup

my mysql port 3306 was not accessible on one of my virtual machines runing Ubuntu 14.04 LTS. To fix it i entered sudo ufw diable and got the answer: Firewall stopped and disabled on system startup ...
0
votes
0answers
305 views

UFW blocks hostname lookup on LAN for ssh and ping

I'm experiencing a problem connecting to hosts on my LAN via their hostname only when UFW is enabled. When UFW is enabled: ssh <machine> gives the message: ssh: Could not resolve hostname &...
0
votes
0answers
619 views

“Temporary failure resolving 'security.debian.org'” despite having allowed DNS via ufw

So I denied everything except DNS, HTTPS and HTTP in the gufw firewall. ufw status verbose looks good with no DENY for port 53 and only allows at the bottom of it. I even executed sudo ufw allow 53/...
0
votes
2answers
388 views

Ubuntu router forward port

I'm trying to forward ports 80, 443, 32400 to a machine internal to my network. So traffic from EXTIP:80 should go to SERVERIP:80 and responses back out through EXTIP:80, it would also be helpful if ...
0
votes
2answers
969 views

Is UFW behind a firewall(ed) gateway router necessary

Is it really necessary to run UFW behind my Gateway Router which already has Firewall/Port rules? In this example, I am discussing running UFW on an Internet Accessible (Linux) Server that is behind ...
0
votes
1answer
1k views

Constant UFW Block in Syslog

In reviewing my syslog, I've found that 99% of it consists of UFW BLOCK statements from 3 or 4 IP's (see below; edited for space). Is this normal? What do these entries mean? If they are safe, how can ...