Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm configuring an Ubuntu Server for my home network to handle NAT and firewall. I've configured dnsmasq and verified that it's working correctly. I want all connections from my internal network to be allowed. However, once I enable ufw, the connections are blocked.

I have tried:

sudo ufw allow in on eth1


sudo ufw allow from

but any solution I try results in messages such as these in syslog:

[UFW BLOCK] IN=eth1 OUT=eth0 SRC= DST= LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=16240 DF PROTO=TCP SPT=37444 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0

Am I understanding the rules incorrectly, or is the problem elsewhere?

share|improve this question
up vote 3 down vote accepted

It looks like you may have "default deny outgoing" turned on. Can you do a "sudo ufw status verbose" for us please? I'm assuming that you're server IP address is not Are you using your server as a gateway? If so, check out this link, which shows hot to set it up (or close to what you need).

share|improve this answer
Thanks for that link, I needed to change the line in /etc/default/ufw to DEFAULT_FORWARD_POLICY="ACCEPT". – Hew Sep 13 '10 at 10:44

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.