Uncomplicated Firewall (ufw)

learn more… | top users | synonyms

1
vote
0answers
15 views

UFW setup for OpenVPN server

I set up OpenVPN server on one Ubuntu machine and I am connecting to it via another Ubuntu machine. However, the VPN works only when the server firewall (ufw) is disabled. That is I can connect when ...
1
vote
1answer
18 views

iptables rule traverse order

Here is partial output of my iptables: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 22866 ...
0
votes
2answers
30 views

UFW on Ubuntu 16, strange behaviour

I am moving from ubuntu 14 to 16 and have been getting some odd behaviour with ufw. ufw status ufw allow 22 ufw enable My connection gets lost. I am not seeing this behaviour in ufw on ubuntu 14. ...
0
votes
0answers
15 views

Prevent Outbound IP Address spoof

We have multiple computers running Ubuntu Desktop, all connected to same Router. Using UFW firewall, all inbound and outbound ports are blocked on these Desktops, except for only one outbound port (...
0
votes
0answers
22 views

UFW doesn't do anything

I have an Intel nuc running Ubuntu Server with UFW enabled and im trying to block port 8112 however i can still reach it from outside my network. I have tried the following sudo ufw reset sudo ufw ...
0
votes
0answers
39 views

UFW issue in Ubuntu LTS 14.04

While executing shell command ufw status && ufw enable - I am getting the error message below: iptables v1.6.0: can't initialize iptables table `filter': Permission denied (you must be ...
1
vote
1answer
82 views

16.04 LTS UFW version

Checking my UFW version I see its 0.35. However, I installed the Snap UFW and it is version 0.36pre-16.2. So how do I use the snap version of UFW? Do I have to uninstall UFW 0.35 first? I also ...
0
votes
0answers
22 views

Allowing access from only a specific IP does not work

I would like to access port 22 (ssh) of a computer whose OS is Xubuntu 15 from a specific laptop with Windows 10 and external IP x.x.x.x using Putty via Internet (i.e., these computers are not in the ...
3
votes
0answers
24 views

UFW Blocking Legitimate Traffic

I am currently getting this kind of message in the UFW and sys logs: xxx kernel: [4962636.572484] [UFW BLOCK] IN=et0 OUT= MAC= SRC=xxx.xxx.xxx.xxx DST=xxx.xxx.xxx.xxx LEN=52 TOS=0x00 PREC=0x00 TTL=52 ...
1
vote
1answer
63 views

what does this activity represents - looking in syslog, kernlog & ufw log

I just noticed that my syslog, kern log & ufw log have similar enteries, all are filled with blocking IP addresses, here I am only putting some lines from syslog. Can anyone tell what kind of ...
1
vote
2answers
79 views

How to Block a range of IP address with UFW

I am trying to block a range of IP address on my Ubuntu 16.04LTS server from a specific country, i.e. China, Iran, etc. I was hoping to find a script or something I could run to easily make a ...
1
vote
0answers
18 views

Allowing outbound connection via UFW

I'm having trouble configuring UFW's 'default deny outgoing' setting. How do I add exceptions to this? Example: sudo ufw enable sudo ufw default deny outgoing sudo ufw allow to 91.189.94.40 sudo ...
0
votes
0answers
18 views

Ubuntu ufw external url calling

I got a Network firewall related issue While calling one external(third party web service) URL from Ubuntu server. It showing one warning in Apache logs as follows file_get_contents failed to open ...
-1
votes
1answer
107 views

Please explain the complete steps involved in the installation of OpenSSH server on Ubuntu [duplicate]

I am having trouble installing openssh-server in Ubuntu. Particularly I want to know how to generate RSA public private key pair and the related concepts. What are the modifications to default config ...
0
votes
0answers
23 views

What ports do I need to open for NFS on UFW?

I currently have ports 111, 1110, 2049 and 4045 open and I am having an issue connecting to my kodi clients. When I disable UFW, everything connects just fine. I have googled and haven't found any ...
0
votes
0answers
15 views

GUFW limit access to websites

Do anyone know how I can limit access to certain websites during specific hours of the day using GUFW? If GUFW do not have this ability, what can I use instead to achieve this function?
1
vote
0answers
29 views

Transmission not downloading due to ufw

I set up ufw and it works nicely with every other service I have but Transmission is a mystery to me. It seems to start up and use different ports every time. Currently I've managed to get it to work (...
0
votes
2answers
27 views

Is there a way to whitlist ip's and block everything else

So i'm running ubuntu on my vps. But the problem is that i have kids trying to figure out the password of the FTP connection and the VNC connection. (with succes). Now i want to ask is there a way to ...
5
votes
1answer
81 views

Block internet if vpn connection drops

Trying to set up gufw so that it if my vpn connection drops, my computer won't be able to access the internet any more. My plan was to block all outgoing, but allow only a connection to the IP of my ...
0
votes
0answers
31 views

Adding ufw rules during a preseeded installation

I've been trying to automatically add UFW rules to allow SSH access during an installation of 16.04 while using a preseed file. However, none of the documented methods result in port 22 being open ...
0
votes
1answer
31 views

Clementine Remote with UFW

So I installed Clementine Remote for Android, to connect to my computer running Ubuntu 16.04. I am also running UFW, and when I tried to connect to Clementine, my Android Device was giving an error ...
0
votes
0answers
50 views

How can I set up a VPN server using L2TP over IPsec with strongswan and ufw?

I'm having lots of trouble getting strongswan and L2TP to work. I'm also having lots of trouble finding a relevant and accurate guide for how to set it up. Would someone please provide a good step-...
0
votes
0answers
16 views

VPN HideMy_SS Connection Issue

I've spent more than a few hours searching through forums, and contacting HMA support, a bit useless in this case. Anyways, here are my observations. If UFW / GUFW is enabled with all inbound and ...
1
vote
1answer
214 views

UFW not working in 16.04 server. Refers to earlier kernel module?

I am trying to move our mail server based on 12.04 to a brand new installation of 16.04 server. When I run sudo ufw status, I get: ERROR: problem running iptables: modprobe: ERROR: ../libkmod/...
0
votes
0answers
15 views

ufw to be enabled by default?

The 'Ubuntu Security Features' page [ https://wiki.ubuntu.com/Security/Features ] states : "Configurable Firewall. ufw is a frontend for iptables, and is installed by default in Ubuntu (users must ...
0
votes
1answer
86 views

xrdp on ubuntu server

I have set up xrdp on my ubuntu server 15.10, with mate desktop environment and it all works fine and dandy. Except for when I enable UFW. I have the following ports allowed all tcp 2222 (ssh) 3389 ...
0
votes
1answer
39 views

Block IP beginning with, U.F.W

Someone is running a registration bot on my site and I have taken steps to prevent the registration, but now I want to block the whole IP range from even being able to access my site. I have set up ...
1
vote
3answers
64 views

Adding VPN to firewall UFW

I'm having trouble at work in connecting to the work VPN while Firewall (UFW) is active. When i disable it "sudo ufw disable", there are no problems. When it's on, when trying to connect I receive ...
0
votes
0answers
32 views

Easiest way to forward a port on local network

I have a server (python -m http.server) running on hostA:8000. Say I want to forward traffic from hostB:8004 to hostA:8000 How can I achieve that from hostB? I've already tried, $ sudo ufw allow ...
3
votes
1answer
73 views

Using UFW with ipsets

I am running Ubuntu 14.04 on a VPS for business purposes. The firewall is setup using ufw; testing reveals that it's working well. I'd like to further secure my server using techniques described ...
0
votes
0answers
44 views

Printing with UFW

I have just set up a print server using CUPS and Avahi to allow printing from iOS devices on my home server. I have UFW set up to block all traffic that isn't on my VPN or over LAN. I have even set up ...
0
votes
1answer
59 views

Inherited Ubuntu server will not PING: What am I missing?

Update: It turns out, our in-house network suppresses pings. I demonstrated this by turning my phone into a hot-spot (thus changing my outbound gateway), connecting with a laptop, then pinging the ...
0
votes
1answer
63 views

UFW rule doesn't work

At first enable the ufw status. root@sai:~# ufw status Status: active It blocks both incoming and outgoing connections, tested by using ping ssh from both sides not working. root@sai:~# ping 192....
0
votes
1answer
39 views

Bad ARGS for ufw deny

I'm following this instruction and got the following error when trying to firewall the client. How else can I use ufw to get the same network behavior? aborns@nautilus:~$ sudo ufw deny out eth0 1:...
0
votes
0answers
36 views

How to make ufw allow only connections from outside lan

I am setting up a server at home from an old pc with ubuntu, and would like to "separate" it from my local network by configuring the firewall to allow only connections from outside my lan. I found a ...
1
vote
0answers
24 views

Gufw fails to control ufw

ufw is 0.34 gufw is 15.10.0 As title says it is not possible to control the active status of ufw through gufw: sudo ufw status Status: Inaktiv start gufw, enter root passwort to authenticate. ...
0
votes
0answers
76 views

UFW not opening port

Could someone explain why I can't open port 64738? I opened it with sudo ufw allow 64738 But when I test with nmap, the port is still closed. > sudo ufw status Status: active To ...
0
votes
0answers
49 views

ufw allow from 10.8.0.0/24 to any port 80 proto tcp

I have openvpn running over 1194/udp and I need to restrict apache access to vpn clients only, the rest of the world should not be able to access web server. So I did this configuration: ufw allow ...
0
votes
0answers
8 views

Why can I not connect to my Ubuntu 12 box when ufw shows my port is accessible from “anywhere”?

I have my ssh ports set to 880 as shown in the screen shot below. But when I try to SSH to my box from a remote IP i cannot access it. The ufw status shows that the port is open from ANYWHERE. Shouldn'...
0
votes
0answers
50 views

Still seeing connections from IP after blocking in fw

So I'm using iftop to monitor connections on my server, and I'm seeing this ip address 116.110.127.24 making constant connections on ssh port. (I'm not sure if this means 22 or my actual ssh port, it ...
0
votes
0answers
81 views

UFW block 80 port? 14.04

Im using ubuntu 14.04.On ufw 80 , 80/tcp , 80/udp is allowed from all. But when i look to logs. its look like this *my server ip YYY.YYY.YYY.YYY *and i delete my mac and ip Feb 21 16:59:14 server ...
1
vote
1answer
79 views

How can I dynamically determine the IP mask to use for dynamic ranges?

I have a list of ranges for IP addresses that I want to block, the ranges are like 210.80.32.0 to 210.80.63.255 How can I dynamically determine the right 210.80.32.0/NUMBER to capture the full range? ...
0
votes
1answer
51 views

UFW firewall start up on ubuntu 14.04.3

On all 3 of my Ubuntu 14.04.3 workstations when restarted the UFW firewall is deactivated and has to be started manually sudo ufw enable. My UFW.conf is set to enable startup as follows: # Set to ...
0
votes
0answers
46 views

Firewall not starting on system startup

I have enable firewall using sudo ufw enable. But when i restart system, it is getting disabled. I checked /etc/ufw/ufw.conf and it has ENABLED=yes. Here is system config $ uname -a Linux master 3....
0
votes
0answers
46 views

Block HTTPS site

Can anyone recommend an effective tool to block some https websites with ubuntu server? I want to use the server as a gateway for the users. A detailed guide would be highly appreciated. Thanks
0
votes
0answers
37 views

UFW ACCEPT Problem

I'm having problem with UFW. If i block like whole /24 network becouse lots of bruteforcing etc. coming from China / Korea or somewhere. They still get to open ports. If i have, lets say port 443 ...
0
votes
1answer
99 views

Unable to add firewall rule “Duplicate Profile”

I'm unable to add new rules to my firewall using ufw gui. In the Log I get the following error. [19/01/16 14:16:43] Error running: /usr/sbin/ufw allow in from any to any port 8000 > WARN: ...
0
votes
1answer
130 views

OpenVPN Configuration with ufw eth0 doesn't exist to add it in before.rules

in this guide I am asked to edit /etc/ufw/before.rules and add: # START OPENVPN RULES # NAT table rules *nat :POSTROUTING ACCEPT [0:0] # Allow traffic from OpenVPN client to eth0 -A POSTROUTING -s ...
0
votes
1answer
74 views

How does ufw filter traffic?

I enabled ufw firewall with the following command: $ sudo ufw enable Firewall is active and enabled on system startup $ Now while I look at the status: $ sudo ufw status verbose Status: active ...
0
votes
1answer
53 views

Would active connections cause this UFW Block?

I'm running ubuntu 14.04 as a gateway, routing is controlled by iptables. I'm getting a number of strange blocks in UFW which seem to effect established connections. Is there any way this block would ...