1
vote
0answers
46 views

Why aren't these ufw rules working?

I'm trying to configure ufw to only allow connections to 3 ip addresses on my local network, and deny everything else. Here's the commands I'm using: yes | sudo ufw reset sudo ufw default deny sudo ...
-1
votes
0answers
18 views

UFW - Ubuntu Firewall - Banned IP address. How do I remove?

Currently I can't access my server remotely unless i turn off my ufw (ufw disable). I added my IP to the ufw accept rule, but it still doesnt work for some reason. Below are some of my screenshots. ...
0
votes
1answer
34 views

Iptables Issue can't SSH Remote Machines

I want to SSH to 192.168.1.15 Server from my machine, my ip was 192.168.1.99 Source Destination was UP, with IP 192.168.1.15. This is LAN Network there are 30 Machine's Connected to the network and ...
0
votes
0answers
49 views

iptables rules keep showing up

I just installed an ubuntu precise server, after a few weird communications issues I checked the iptables list and found: Chain INPUT (policy DROP) target prot opt source ...
0
votes
0answers
41 views

How to reset/flush remove ufw rules in recovery mode in ubuntu 12.04

Hello I think I have mistakenly locked myself from a remote server (ssh). I had a way to restart in recovery mode but it seems ufw is not even installed when in recovery mode. should I follow ...
0
votes
0answers
41 views

Ubuntu 13.10 allows connections from LAN but not from outside LAN

SSH ports configured to all 22 and another one. I can connect from another Linux/Windows workstations on my home LAN no problem. Same thing for nomachines nx server. Teamviewer connects with no ...
1
vote
1answer
58 views

How to block ip forwarding for specific remote ip address

I use ubuntu as gateway for several hosts. I need advise how to block ip forwarding for specific ip address or specific ip range? I tried to block ip via ufw deny rules, but it looks like ip ...
0
votes
1answer
210 views

what does this mean “80/tcp filtered http”

Our linux server(ubuntu) stop listing on port 80. this is what i got : PORT STATE SERVICE 22/tcp open ssh 80/tcp filtered http what does this "80/tcp filtered http" means? What ...
0
votes
1answer
117 views

UFW locks me out of server everytime I run it

Background: I'm setting up a new 12.04 instance on a VPS with a new provider.The VPS provider only offers a 32bit image but that really shouldn't matter here. I have no local access to the machine and ...
1
vote
2answers
330 views

UFW not blocking connections to docker instance

I have a webservice running inside a docker instance which was run using the following command: sudo docker run -d -p 4040:4040 .... My UFW rules look like this: ~ sudo ufw status Status: active ...
1
vote
2answers
610 views

how do you create an app profile for ufw?

Ufw has a command that lists out profiles to which you can further explore their profile definitions $ ufw app list And $ ufw app PROFILE {app profile title} I was wondering how you can ...
1
vote
1answer
335 views

How do I whitelist some connections by ip from being dropped by connlimit?

I'm using these rules in /etc/ufw/before.rules # Limit to 20 concurrent connections on port 80 per IP -A ufw-before-input -p tcp --syn --dport 80 -m connlimit --connlimit-above 20 -j DROP -A ...
0
votes
0answers
90 views

Why is UFW ignoring rule order?

I have two interfaces, one is eth0 and the other is a VPN over tun0. user@server:~$ ifconfig eth0 inet addr:192.168.1.80 Bcast:192.168.1.255 Mask:255.255.255.0 tun0 inet addr:10.4.0.100 ...
0
votes
0answers
83 views

VPN won't connect while ufw is enabled

I use a paid VPN service which uses OpenVPN. It works great and I have been pleased with it for months now. Recently, I enabled, and began configuring, the firewall that is provided with Ubuntu ...
2
votes
2answers
225 views

UFW and firewall

So I recently installed ubuntu and I have been working with it no problem.While browsing through the security guides (specifically: https://wiki.ubuntu.com/BasicSecurity) I noticed this: "enable the ...
0
votes
0answers
51 views

UFW problem : can not access certain pages

Hello, I configured iptables using ufw to deny traffic from and to anywhere except my chosen ports. This is my /lib/ufw/user.rules : *filter :ufw-user-input - [0:0] :ufw-user-output - [0:0] ...
0
votes
0answers
237 views

Foraward Traffic from local machine to proxy server using iptables

I am using Ubuntu Server 12.04. My IP is 192.168.4.160. I want to route the HTTP traffic generated locally from my system destined to a particular URL (say x.x.x.x) to pass through proxy server. My ...
0
votes
1answer
56 views

why opening a port is so difficult in ubuntu?

I have searched around and I have run these commands iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 5432 -j ACCEPT iptables-save > /etc/iptables.rules And I rebooted the box. I had no luck. ...
0
votes
1answer
779 views

Connecting to NAT virtualbox guest from bridged network

I've setup a Virtualbox Ubuntu 12.04 server using Vagrant. I can ssh to it and even ping my desktop from it. What doesn't work is to ping the guest OS from my desktop. I've tried to flush the ...
1
vote
0answers
361 views

UFW Firewall Rules, has a hole in it. Please help

Can someone please look at the below output for me. I have my UFW on deny/deny, and here are the rules. But if I leave my Ubuntu Server on, with a Windows XP VM, and let Instant Messenger run in the ...
0
votes
1answer
2k views

UFW 'default deny incoming' doesn't work

I have UFW enabled, 'default deny incoming' set and no any additional rules, but I still can access all ports from other PCs. I have to manually block each port. What can be wrong?
0
votes
1answer
1k views

Problems allowing outgoing multicast in ufw

I am having problems configuring the uncomplicated firewall (ufw) to allow outgoing multicast traffic. I am blocking all in and outgoing connections as the default policy. I have supplemented with the ...
0
votes
1answer
562 views

Can't open a port

I need to run an app on my computer which connects to local port 49100. So everything runs on one computer. I tried adding rules to gufw, firestarter, manually: sudo iptables -A INPUT -p tcp --dport ...
2
votes
1answer
186 views

Using Ubuntu as a gateway for monitoring and possibly IPS IDS within Active Directory

Ok, I've searched for days, maybe you can point me in the right direction. I have an MPLS scenario with a shared gateway in a multi-domain M$FT AD environment. On the inside of the MPLS all of the ...
3
votes
2answers
7k views

How to configure UFW to allow IP Forwarding?

I have UFW, OpenVPN and Virtualbox installed on my home server. I have a host-only network for my virtual machine guests (vboxnet0) set up with the IP range 10.0.1.0, and another IP range of 10.0.0.0 ...
6
votes
1answer
2k views

Block Ping from a specific IP

I am on a private LAN 192.168.1.0/24. My ip is 192.168.1.3, I want to block only ping requests from 192.168.1.2. I am running ubuntu 11.10. I found two links First tells how to block an IP but not ...
2
votes
2answers
11k views

How do I allow all possible IPs for Gmail servers through my ufw firewall?

I am currently using the following rule: ufw allow out from my_local_ip to any port 587 This is a little too lax for my liking. I would like to tighten it up and restrict it to only gmail's smtp ...
2
votes
1answer
530 views

Looking for IPTABLES and UFW readily available, the best proven rules

ok i am up with UBUNTU finally, and liked the distro! particularly ufw, synaptic and software manager. as i am pretty blind newbie to linux, i need some help securing Ubuntu desktop. I've gone ...
2
votes
3answers
1k views

Why is Ubuntu permissive with outgoing connections by default?

I am pretty newbie to Linux, as most of computers for resources in my school use Linux, I just installed Ubuntu to learn. By default iptables and ufw sets policy as under: IPTABLES -P INPUT DROP ...
9
votes
2answers
3k views

potential ufw and fail2ban conflicts

Will running both fail2ban and ufw cause problems? I noticed that fail2ban modifies iptables rules, but ufw already has a ton of iptables rules defined... so I'm not sure if fail2ban will mess these ...