Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free.

Here is my status:

$ sudo ufw status verbose
Status: active
Logging: on (medium)
Default: deny (incoming), allow (outgoing)
New profiles: skip

To                         Action      From
--                         ------      ----
22                         ALLOW IN    Anywhere

All outgoing flow are allowed. Now when I am doing:

$ wget www.google.com
--2013-07-30 14:28:00--  http://www.google.com/
Resolving www.google.com... failed: Name or service not known.
wget: unable to resolve host address `www.google.com'

What I see in /var/log/kern.log is that the traffic is, indeed, blocked:

Jul 30 14:11:27 XXXXXX kernel: [2207680.256415] [UFW BLOCK] IN=lo OUT= MAC=XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX SRC= DST= LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=62240 DF PROTO=UDP SPT=35323 DPT=53 LEN=40 

Here is my ufw version:

$ sudo ufw version
ufw 0.29.3-1
Copyright 2008-2009 Canonical Ltd.

Is explicitly allowing outgoing traffic not enough? How to solve that? Should I add a rule for allowing the loopback interface? How to do that?

share|improve this question

1 Answer 1

You need to allow established traffic back in.

At the moment your machine is trying to do a DNS lookup for www.google.com but it is never getting the result as the traffic back from the DNS server is being blocked.

share|improve this answer
shouldn't that (as well as loopback traffic) be handled by the default before.rules file though? at least that's how it seems to be in ufw 0.31.1-1 –  steeldriver Jul 30 '13 at 18:09
This answer reiterates the problem and doesn't actually answer the question of HOW. I'm also looking for the answer to this –  Neil C. Obremski Nov 11 '13 at 22:04

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.