setting up ufw for a website, I want to to disallow everything except ssh, e-mail, and http

Question

I have read the basic instructions here:

https://help.ubuntu.com/community/UFW

I want to sudo ufw default deny and then

sudo ufw allow ssh
sudo ufw allow smtp
sudo ufw allow www
sudo ufw allow https
sudo ufw allow imaps

to allow the services I need, am I missing anything ? I assume allowing ssh will also allow scp ? (heck I will allow sftp as well anyway).

However my problem is I am connecting remotely, so the only way I can do what I want is to actually do a sudo ufw default allow then use a list of the services provided by less /etc/services and deny each service individually? This seems a pain as if I turn on the firewall with default deny it will boot me out of my ssh connection?

Answer 1

The easiest solution is to find your current IP, and first do the following:

sudo ufw allow in from 192.168.1.100

Where 192.168.1.100 would be your current IP. This way you don't block yourself out from the machine.