Questions tagged [ufw]

Uncomplicated Firewall (ufw) is a frontend for iptables, works as a host-based firewall and provides a framework for managing netfilter, as well as a command-line interface for manipulating the firewall.

Filter by
Sorted by
Tagged with
35
votes
4answers
61k views

UFW: Allow traffic only from a domain with dynamic IP address

I run a VPS which I would like to secure using UFW, allowing connections only to port 80. However, in order to be able to administer it remotely, I need to keep port 22 open and make it reachable from ...
15
votes
6answers
17k views

Why does Debian come without a firewall enabled by default?

I'm using Debian 9.1 with KDE and I'm wondering why it comes without a firewall installed and enabled by default? gufw is not even in DVD1's packages. Are people expected to connect to the Internet ...
15
votes
1answer
4k views

How can I disable UFW logging for a specific event?

My router sends out multicast packets in regular intervals that are blocked by UFW's standard policies. These events are harmless but spam my syslogs and ufwlogs. I can't change the router's behaviour ...
13
votes
1answer
24k views

Do you need to reload after adding a rule in ufw?

Do you need to run any of these commands: sudo ufw reload sudo ufw disable sudo ufw enable after adding a rule via sudo ufw allow?
10
votes
4answers
28k views

UFW is blocking DNS

I am configuring the security in my server. For easier the manage at the firewall, I installed the UFW. I did some settings in the UFW and I allowed some ports. Therefor when I enabled it the DNS ...
7
votes
3answers
18k views

How can I enable ufw automatically on boot?

sudo ufw enable Firewall is active and enabled on system startup sudo ufw status Status: active But after I restart the system and run sudo ufw status, I get the message: Status: inactive How can ...
7
votes
1answer
13k views

Uncomplicated Firewall (UFW) and UPNP

Is it possible to configured UFW to allow UPNP between computers in the home network? Everything works if I turn off the firewall. I can see in syslog the firewall is blocking me. I've tried all ...
7
votes
1answer
6k views

Creating UFW rule to allow application to use dynamic ports

I am currently trying to get a Google Chromecast device to work through my Ubuntu 13.04 based computer. Currently, the Google Chrome extension shows "no devices found" as long as my UFW firewall is ...
6
votes
1answer
3k views

How to measure iptables load?

I have added about 3500 IP addresses to iptables using ufw on a Debian 7 and I am wondering if this has any impact on the performance of my server. How can I measure that?
4
votes
1answer
798 views

ufw firewall rules for security.debian.org

What is a practical way to manage a whitelist of firewall outgoing connection rules for http://security.debian.org (on a server that blocks all outgoing connections by default)? My understanding is ...
3
votes
1answer
2k views

Where are the logs for UFW located on Arch Linux?

UFW is enabled and logging is set to HIGH on my Arch Linux system. I am sure that it is running and blocking some of my connection attempts. However I cannot find any logs. The places/commands I tried ...
3
votes
1answer
253 views

Passing PAM parameters to UFW

On development server i want to open all ports for specific ip address after ssh login But my ssh login script isn't working #!/bin/sh if [ "$PAM_TYPE" = "close_session" ]; then ...
3
votes
1answer
1k views

Can I limit connections per second for certain UserAgents using UFW?

GoogleBot is hitting my server hard - and even though I have set the CrawlRate in Webmaster Tools it is still hiking up the load on my server and slowing down Apache for the rest of the normal web ...
3
votes
1answer
3k views

UFW/IPTABLES not blocking DHCP UDP port 67?

I am running ubuntu 16.04. I have ufw installed and enabled. I also have isc-dhcp-server installed. I have not opened up UDP port 67, yet DHCP clients still seem to be able to obtain DHCP leases from ...
3
votes
1answer
297 views

What does the “Incoming” option refer to in ufw?

I am configuring a firewall on my Linux Mint 17.2 to maximize security, mainly to put my mind at rest that no one will be able to do anything malicious. In gufw, there are options for allowing or ...
3
votes
0answers
772 views

Why doesn't ufw enforce firewall rules for traffic coming from Virtualbox VM

I've been running Linux Mint 17 on my laptop for a while and thought I had it locked down to not allow any incoming traffic through "Firewall Configuration" (ufw GUI)—I have also validated this from ...
2
votes
1answer
11k views

Best way to disable SSH for all users? [closed]

For security reasons I want to turn off SSH when I don't use it and turn it on again via a VNC connection as I can connect to my web server remotely over the Digitalocean control panel's console ...
2
votes
1answer
2k views

Can't log in via SSH after reboot!

I turn on firewall with ufw with "systemctl enable ufw; systemctl start ufw" and "ufw enable". Then I set it with "ufw default deny incoming" to stop the incoming traffic. In the meanwhile, I allow ...
2
votes
2answers
1k views

GUFW returns a segmentation fault in line 13

When I run GUFW as root, it returns: No protocol specified Unable to init server: Could not connect: Connection refused No protocol specified Unable to init server: Could not connect: Connection ...
2
votes
1answer
2k views

ufw logs too much stuff, how can I disable that?

I happen to find out that syslog.1 takes 27 Gb and the logs in it have been inserted by the firewall ufw. How can I disable or reduce logging that much stuff into syslog by ufw?
2
votes
1answer
442 views

How can I set up an IP-Agnostic VPN Kill Switch using ufw

Been searching for the answer, but have found nothing. Like most smart Internet users, I use a VPN. You can correct me if I'm wrong, but when I set up a VPN (using the OpenVPN protocol, at least) the ...
2
votes
1answer
104 views

Can I uninstall ufw if using iptables?

OS: Linux Mint 18.2 Cinnamon 64-bit Let's start with the status of ufw: sudo ufw status says: Status: inactive Hence, I suppose, in spite there is connection between ufw and iptables, if I am ...
2
votes
1answer
1k views

UFW Limit does not appear to work

I have my ssh port changed to XXX. Then I did ufw limit XXX/tcp However, when I try to login, after 5/6 failed attempts I get thrown back to prompt, but I can try again. Is that supposed to be the ...
2
votes
1answer
706 views

Can't get ufw rules to allow dlna/upnp traffic between pc and stereo

I'm using pulseaudio-dlna+pavucontrol to direct sound output from my laptop (192.168.2.159) to my yamaha stereo (192.168.2.160) This only works when I disable ufw with sudo ufw disable I struggle to ...
2
votes
1answer
2k views

What is kdeconnectd and how to permanently disallow it in the firewall?

What is kdeconnectd and how can I permanently prohibit it from connecting to the Internet? In the gufw firewall it shows up under "Report" where I clicked the + button after selecting it and selected ...
2
votes
1answer
219 views

Does fwknop play nice with ufw?

The tutorial for fwknop says to block ports with an iptables script. I don't want to use iptables since it's too confusing, I'd rather use ufw. But it seems like ufw does some complicated stuff, so I'...
2
votes
1answer
2k views

How to forward Remote-Desktop Port across interfaces using ufw?

Machine A has two network interfaces: Network eth0: 10.10.20.0/24 Network wlan0: 192.168.1.145/24 Machine A has 192.168.1.145 as Default Gateway, and also a route to pass 172.16.0.0/16 to 10.10.20.1....
2
votes
0answers
76 views

Interpreting UFW log - Brother printer and 239.255.255.250

I'm using UFW and don't know what's going on here. My ufw log has many statements like this: [UFW BLOCK] IN=enp0s25 OUT= MAC=01:00:5e:7f:ff:fa:9c:30:5b:c3:df:c2:08:00 SRC=10.0.0.49 DST=239.255.255....
2
votes
1answer
526 views

OpenVPN or IPtables for split tunnel control?

I have been plugging away but not luck, but from what I understand what I am trying to split tunnel. I have a VPN in place (and working) where all traffic from my LAN heads out to the internet via ...
2
votes
0answers
496 views

how to forward all UDP traffic to VPN client IP with ufw

I'm using sipgate with freepbx and I've got down to what I presume is the final hurdle with the one-way audio issue. From everything I've read the issue points to NAT. I need to forward all UDP ...
2
votes
1answer
346 views

Why does mounting external harddrive trigger a UFW event?

Today I noticed when I plug in my 2TB external Toshiba hard drive, it triggers a ufw event in my logs: Jul 20 11:24:20 linuxbox kernel: [152873.728277] [UFW BLOCK] IN=inet1 OUT= MAC= SRC=xxxa DST=...
2
votes
1answer
435 views

How to properly port forwarding between different machines using UFW / iptables and DD-Wrt?

This is my network I want to see my ip_camera (192.168.3.4:80) from outside my house. It is on dd-wrt router (192.168.3.1) without internet. The router 192.168.1.1 has internet. However, i have a ...
1
vote
3answers
257 views

UFW - how to know which ports are blocked by default?

Regarding using UFW ("Uncomplicated Fire Wall") how could one know which ports are blocked by default, that is right after doing apt-get install ufw -y && ufw enable? Don't have a machine to ...
1
vote
1answer
4k views

Allow access to Apache on both port 80 and 443 in Ubuntu 16.04

I've just installed UFW 0.35 on Ubuntu 16.04: root@localhost:/etc# ufw --version ufw 0.35 Copyright 2008-2015 Canonical Ltd. and root@localhost:/etc# ufw app list Available applications: OpenSSH ...
1
vote
1answer
2k views

Opening port not working

I have a python server running on port 8000 on a raspberry pi and would like to make it accessible within the local network, which is currently not working. The interface wlan0 is configured with ...
1
vote
1answer
560 views

Limit log sizes in particual ufw's logs

(Ubuntu 14.04 x86) I have enabled ufw and enabled logging (level low - the default). Even on low there is an entry about every second (it is accessible from the Internet - I guess just port scans ...
1
vote
3answers
1k views

UFW is blocking DNS requests through VPN [closed]

I have a very strange behaviour of my UFW on Ubuntu 18.04. I set up basic rules, everything is OK until I connect client to this server through VPN. On the client side ping works fine but nslookup / ...
1
vote
2answers
175 views

How do I block public port(3306) access in Linux but allow from other nodes on local network?

I have a MySQL server running on port 3306 with a private IP: 10.64.30.117. I also have a web app running on another node with a private IP: 10.17.23.1. I want the web app to be able to access the ...
1
vote
1answer
203 views

Firewall configuration for NFS share of ZFS mirror

I have several Ubuntu Server 16.04 VMs. One of these is my fileserver and has a ZFS mirror. I want to mount filesystems in the mirror to various different client VMs. I can successfully do so when the ...
1
vote
1answer
533 views

Why Linux firewall GUI Gufw not in Debian window-key search?

The guide recommends the Gufw firewall GUI. I installed it by apt gufw/oldstable,oldstable,now 12.10.0-1 all [installed] graphical user interface for ufw Typing ẁindow key + gufw, I cannot see ...
1
vote
2answers
2k views

I enabled ufw in an aws instance. How to stop that?

I enabled ufw within the server instance, when connected through ssh. But now, I am not able to connect to the server in any way. Is there a way to disable the ufw in the server? I couldnt find any ...
1
vote
1answer
158 views

Port prerouting only in case of my IP, not others

I'm setting up SSH access to my own Git server and I've done some prerouting because SSH server is not listening on standard port because Git server is run by non-root user. This is the rule I ...
1
vote
1answer
764 views

UFW app based filtering

is there any filtering in ufw which works sort-of like win firewall? basically allowing me not only to create ip/port/proto based rules, but also to bind such limitations to specific executables ...
1
vote
1answer
9k views

ufw: how to forward single port to another port on different interface

I have two interfaces eth0 (192.168.1.2) and eth1 (192.168.3.2). I receive data from 8080 at eth0. I want to forward it to eth1 port 80. I'm using UFW, because i don't understand iptables and how to ...
1
vote
1answer
1k views

ufw allow ssh - and then connection gets lost

I'm trying to set up a debian server in the cloud, over SSH. I log in using a key. After the initial startup I want to set UFW: apt-get install ufw ufw allow ssh ufw enable This is how I've done ...
1
vote
1answer
6k views

ufw won't allow connections to port 5432

I've installed Postgresql 9.4 on Ubuntu Trusty from the PGDG ppa. I've created a database and set it listen-addresses to '*'. I've made an entry in the pg_hba.conf file. I can connect locally with no ...
1
vote
1answer
42 views

What does it mean if requests from a blocked IP do not show up on tcpdump?

I have a VPS with Ubuntu 16.0.4 installed on it. Every time I connected to it through SSH, the next times I attempted to connect would end up in time out errors along with any other kind of connection ...
1
vote
1answer
537 views

How to make systemd-nspawn work with ufw firewall?

I'm running a systemd-nspawn container (Debian 9, host also Debian 9) with VirtualEthernet=yes and some ports forwarded, e.g. Port=tcp:443:443. I.e. a web server runs in the container and should be ...
1
vote
2answers
1k views

Prerouting SSH to a different internal port

I'm working on local git project and I'm running separated SSH service on port 2222 with non-root user. Along that I'm using ufw firewall and opened port 2222 - I opened it just for testing if ...
1
vote
1answer
2k views

UFW rules to allow specific behaviour

I'm new to UFW. One of our servers were compromised and I had to immediately: Deny all inbound. Deny all outbound. Allow all SSH. Allow outbound DNS. Allow Git clone, push, pull, etc. Allow only ...