ufw is the default firewall application for Ubuntu Linux.

learn more… | top users | synonyms

0
votes
1answer
29 views

Has Kubuntu 15.10 been hacked?

Can someone tell me what this message means please? [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.19" (uid=0 pid=1183 comm="/usr/sbin/dnsmasq --no-resolv ...
0
votes
0answers
21 views

What exactly are the security implications of ufw DEFAULT_FORWARD_POLICY “ACCEPT”?

I found this question asked on Serverfault, but the answer just provided alternatives instead of actually detailing the implications. I had to set DEFAULT_FORWARD_POLICY to "ACCEPT" to be able to ...
0
votes
0answers
16 views

Connecting externally to home server firewall questions

I have an ubuntu 14.04 headless server running as a NAS/VNC and I'd like to allow external connections. I will be the only one connecting to the server and I'd be connecting from two locations and no ...
1
vote
2answers
60 views

Ubuntu 14.04: enabled ufw and forgot to allow ssh

Last night I did a most annoying mistake. On a Ubuntu 14.04 server I enables ufw and forgot to allow ssh. Then I logged off. Naturally I am now locked out with ssh. Fortunately my hoster provides a ...
0
votes
0answers
39 views

Secure settings for a personal OpenVPN IPSEC/L2TP server?

I'm trying to harden my personal server as much as possible. This is the first server I have managed, so I'm also using this as a learning experience. My setup so far: 4096 bit SSH keys SSH is on a ...
0
votes
0answers
27 views

Block HTTP/HTTPS traffic unless proxied through CloudFlare using UFW

I have a web server and I wish to enforce that all HTTP/HTTPS connections go through CloudFlare, and can not simply just go directly to the IP address of the origin. How can I configure UFW to do ...
0
votes
0answers
32 views

How can I find out why my UFW is getting hits from outside IP?

I have a server that has 2 NICs, one is connected to the outside internet. My syslog shows the following entry: Dec 2 00:27:27 green kernel: [ 191.770184] [UFW BLOCK] IN=eth1 OUT= ...
0
votes
1answer
117 views

SSH fails to connect on private interface over IPSec tunnel

I have Client and Server in different locations connected via an IPSec tunnel, if I try to ssh from Client to Server over the internet everything works fine. I have tried from several Linux and Cygwin ...
0
votes
0answers
47 views

How to configure UFW to deny outgoing traffic on all ports except a few ones I specify manually?

Sounds simple but it does not look like it is with UFW. Does anyone know how to do that without having to specify thousands of lines?
0
votes
0answers
271 views

vsftpd: Can't transfer files via FTP (SSL) when UFW is enabled

I have a Debian 8 server which runs vsftpd. I can successfully connect to it via Filezilla and browse directories. However, I can't transfer files (neither upload nor download) while I'm connected to ...
0
votes
0answers
103 views

pptp port 1723 unreachable

I'm trying to setup a pptp VPN on my server, but for some reasons the server is not responding to me. on the server I have: $ sudo netstat -alpn | grep :1723 tcp 0 0 0.0.0.0:1723 ...
1
vote
1answer
325 views

Block applications using UFW

I am using Ubuntu 14.04 desktop. I want to block certain applications from accessing internet and allow some. Can this be done using UFW ? If yes, how ? If no, can it be done by any other method ? I ...
1
vote
1answer
290 views

How to disable rate limit on SSH connections in UFW?

I've got a dev server to which I constantly sync my code using rsync. To secure the dev server a bit more I now activated UFW, which seems to work fine. The problem is that it works a bit too well, ...
0
votes
0answers
118 views

Allow port 1352 via UFW and Squid

Our server runs UFW and Squid (along with SquidGuard). All the systems in our LAN connect to the Internet via this server. UFW seems to allow port 1352. Squid also seems to allow connections on port ...
1
vote
0answers
215 views

Limit connections per second with iptables/ufw

How can I tweak the following entries to allow more requests per second? Maximum hitcount is 20 if you do not edit some other config files. The entry of my /etc/ufw/before.rules file -A ...
0
votes
1answer
110 views

Set block time with iptables

I have the following rules in ufw, for iptables: -A ufw-user-input -p tcp --dport 80 -m state --state NEW -m recent --set -A ufw-user-input -p tcp --dport 80 -m state --state NEW -m recent --update ...
1
vote
1answer
85 views

confusing INPUT,OUTPUT iptables rules

Following is my iptables rules in Ubuntu. ╰─$ sudo iptables -S -P INPUT ACCEPT -P FORWARD DROP -P OUTPUT ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT -A ...
3
votes
2answers
3k views

Using Raspberry Pi as IPv6 router for network

I've succeeded in setting up IPv6 for my Raspberry Pi with tunnelbroker.net. However, I would like to share the /64 I got amongst the other devices in my network. The router of the network is a Virgin ...
4
votes
4answers
11k views

Is it possible to put UFW on CentOS?

If so, how would I do it? If not, is there an easier way to set some basic rules on CentOS other than iptables? I'm more of an app developer and less of a sys admin.
0
votes
2answers
663 views

UFW default rules… where are they?

In the tutorial on UFW here https://help.ubuntu.com/community/UFW it says that UFW uses the default rules if enabled and not configured. I checked the folder: /etc/ufw/ and the files I found ...
1
vote
1answer
828 views

With ufw, how do I limit SSH from outside, and not from inside?

Using UFW, limiting connection attempts for things like SSH is real easy: # ufw limit SSH However, I'd like to limit only the public-facing interface, not the LAN interface. This command does it ...
1
vote
1answer
819 views

UFW: block all traffic for port 3306

How can I block all traffic for just one port? Take the following situation: Ubuntu Desktop VM Browser has access to internet (port 80 stays open) Ubuntu update services work normally (may not be ...
1
vote
1answer
283 views

Adding a custom SSH port to Ubuntu 12.04 LTS through UFW

I am trying to configure a Ubuntu 12.04 based VPS and I have changed my ssh port from 22 to 803 and everything worked fine. After this I've installed UFW and now I can't login using SSH. Before I ...
1
vote
1answer
1k views

UFW rules for specific host / dynamic dns

How can I setup UFW (Uncomplicated Firewall) to add rules for specific hosts? Eg. I want to allow SSH only from yourpc.no-ip.org?
0
votes
0answers
709 views

Allow only VPN traffic with GUFW not working

Running Kubuntu 13.04 I have read this tutorial about only allowing torrent traffic with GUFW but it seems this is not working for the browser. My torrent application is working but I cant browse any ...
1
vote
0answers
108 views

Lubuntu UFW does not respond

I have been using ubuntu for a long time. Nowadays, I wanted explore lubuntu. However, I cannot configure ufw. Actually I can but it does not respond. Basically, I cannot get the result of "ufw ...
0
votes
2answers
611 views

All outgoing mail in VM should stay local

I have setup an Ubuntu 12.04 VM, which I use to test and develop magento shops. On this desktop VM I have an almost exact copy of the shop running. I prefer to use a desktop VM as this gives me the ...
3
votes
2answers
7k views

UFW is active but not enabled why?

I was trying to setup a firewall in my Ubuntu 12.04 machine. After some struggling I got the following. Isn't this sounds a bit odd? thomas@thomas-K40IJ:~$ sudo ufw status verbose Status: active ...
1
vote
1answer
74 views

Delete a previously added rule in ufw

I created a firewall rule for an application and put into /etc/ufw/applications.d, added that rule with command sudo ufw allow MyApp but now I cannot delete it. When I do sudo ufw delete MyApp ...
5
votes
2answers
435 views

How to block a particular computer behind a NAT

I run a small hostel and have the following network configuration: Router1 (192.168.1.1) ─┬─ (192.168.1.2) Ubuntu Samba+SSH Server ├─ (192.168.1.X) Router 2 (192.168.2.1) ─┬─ ...
1
vote
1answer
138 views

Configure application integration with ufw firewall

I've read the ubuntu developer docs regarding the ufw here, but couldn't find what I was looking for. It allows me to set rules for controlling in/out traffic based on source IP or port numbers, but ...
6
votes
2answers
289 views

Open up firewall automatically to anybody who has successfully connected via SSH

I have a server which runs a few services. However, for security reasons, I configured the server so that nothing, except for SSH, is accessible from outside. What I'd like to do instead, though, is ...
0
votes
1answer
1k views

Opening firewall to incoming port 443

I recently set up the ufw firewall on a Linux machine so that outgoing connections are allowed, incoming connections are denied, and denied connections are logged. This seems to work fine for most ...
1
vote
0answers
254 views

Can ipmasq and ufw be used together?

If both ufw and ipmasq manipulate iptables, can I use ipmasq for a quick easy setup and then use ufw afterwards to add security or will the two just trample all over the iptables "stuff"? I'm playing ...
1
vote
1answer
1k views

Debian - starting UFW (Uncomplicated Firewall) before network interfaces are operational

I want to install UFW on Debian Lenny. Everything looks straightforward except that I don't know where to plug UFW startup script so that it configures iptables before hax0rs can break in. I've ...
0
votes
2answers
812 views

Ubuntu Linux UFW Firewall, Local Intranet Access

At home, I have Ubuntu server with the UFW firewall. What command do I type to turn on local intranet access to my web server, but keep the outside world out from my DSL modem?
0
votes
1answer
1k views

Bandwidth limit by IP on Ubuntu UFW NAT

How can restrict the bandwidth (or perhaps rate of packets) of each IP's traffic going through my Ubuntu Server 10.04 UFW NAT box? (If this belongs on another SOI site, please move it.)
0
votes
1answer
863 views

ufw says a port is open, everyone else disagrees

I am running apache2 on Ubuntu 9.10, and I want expose a particular site through port 10045. My first instinct was to go to ufw and open that port. I've done that, and if I do a list of rules in ufw ...
1
vote
4answers
4k views

How can i open in port 3306 in Ubuntu 8.04.1?

I want to open port using command sudo ufw allow 3306/tcp but it gives the following error: sudo: ufw: command not found please help me
2
votes
4answers
6k views

UFW as an active service on Ubuntu

Every time I restart my computer, and check the status of the UFW firewall (sudo ufw status), it is disabled, even if I then enable and restart it. I tried putting sudo ufw enable as one of the ...
-1
votes
3answers
2k views

Best firewall for Ubuntu [closed]

I currently have ufw and Firestarter installed on my Ubuntu Desktop 9.10 Which one should I stick with?
0
votes
2answers
1k views

How do I know which firewall is running on Ubuntu 9.10?

I've always used ufw by default, even though I also had installed Firestarter After upgrading from Ubuntu 9.04 to 9.10, by way of Update Manager, I've found ufw disabled (when I look at gufw). How ...
2
votes
5answers
1k views

ports I should block

I recently set up an Ubuntu Server at home, and the first thing I did was place the UFW firewall at full power. Bad move. I could not even "rlogin" to it. I just disabled the firewall, and would ...