Uncomplicated Firewall (ufw)

learn more… | top users | synonyms

1
vote
3answers
210 views

Maybe abuse of my server

I have a vps at hetzner.de with vmware running several instances, one of them is an Ubuntu server 13.10, primarily acting as mysql-server for several websites. Today I received an email from hetzner, ...
0
votes
1answer
73 views

why Ubuntu Firewall not showing verbose?

Even Ubuntu Firewall in running mode , I am not getting the data. may I know why ? root@ubuntu:~# sudo ufw status numbered Status: inactive root@ubuntu:~# service ufw start start: Job is already ...
1
vote
2answers
180 views

Am I under attack?

When I checked my log viewer, I noticed that ufw is blockng many ips that I'm not familiar with! I have only three computers in my local network at the time when I was checking my log viewer I was ...
3
votes
2answers
630 views

UFW not blocking connections to docker instance

I have a webservice running inside a docker instance which was run using the following command: sudo docker run -d -p 4040:4040 .... My UFW rules look like this: ~ sudo ufw status Status: active ...
0
votes
2answers
156 views

How do I extract the source MAC from a [UFW BLOCK] entry?

I have the following UFW Block entry. How do I get the source MAC? I'm getting a ton from the same MAC=e8:11:32:cb:d9:42:54:04:a6:ba:22:f8:08:00 doing port scanning. If it matters, I'm using 12.04 ...
1
vote
0answers
108 views

Configuring ufw and iPredator VPN

I am running a VPN via IPredator on Ubuntu 12.04 Desktop, which works perfectly, when ufw is disabled. When I enable ufw, I logically cannot establish a connection. IPredator states that I have to ...
0
votes
0answers
21 views

How do I grant UFW manage access to a particular user?

I would like to allow a particular user the permission to run "ufw allow" (or equivalent). Ideally without giving that user the ability to run other privileged commands, or give firewall authority to ...
2
votes
2answers
1k views

how do you create an app profile for ufw?

Ufw has a command that lists out profiles to which you can further explore their profile definitions $ ufw app list And $ ufw app PROFILE {app profile title} I was wondering how you can ...
1
vote
2answers
162 views

Access computer on internal network from Internet

My setup: Ubuntu 13.10 server with ufw, facing outside world on eth0, IP forwarding and masquerading working OK. Internal network 192.168.0/24 on eht1, no problem accessing the internet. I need to ...
0
votes
0answers
827 views

How to configure ufw to really allow outgoing connections

I have hard time to understand how ufw should be configured. The problem is that I allowed outgoing traffic, and still I cannot do virtually anything. I'm using Ubuntu 12.04 on VPS. ufw --version ...
1
vote
2answers
509 views

How do I whitelist some connections by ip from being dropped by connlimit?

I'm using these rules in /etc/ufw/before.rules # Limit to 20 concurrent connections on port 80 per IP -A ufw-before-input -p tcp --syn --dport 80 -m connlimit --connlimit-above 20 -j DROP -A ...
1
vote
0answers
180 views

Unable to bridge using OpenVPN on Ubuntu 12.04 Server

I set up an Ubuntu Server 12.04 LTS in my LAN and forwarded tcp port 1194 to it. OpenVPN-Server is running, the Client (Ubuntu 12.04 LTS) can connect. Device tap0 is visible on client: tap0 ...
0
votes
0answers
134 views

Why is UFW ignoring rule order?

I have two interfaces, one is eth0 and the other is a VPN over tun0. user@server:~$ ifconfig eth0 inet addr:192.168.1.80 Bcast:192.168.1.255 Mask:255.255.255.0 tun0 inet addr:10.4.0.100 ...
0
votes
1answer
1k views

ubuntu server 12.04 and ufw failure on startup, and several module not found errors

I have problem enabling ufw on startup, it works fine if I do: sudo ufw enable. But after restart puf, I've to redo it. I tried: sudo /lib/ufw/ufw-init stop ; sudo /lib/ufw/ufw-init start And ...
1
vote
1answer
709 views

How to configure ufw on Ubuntu and still retain internet connection?

I am having trouble with how to configure ufw firewall for my Ubuntu 13.04 VPS server. Each time I enable the firewall, it closes all connections to the server. I need to open the following ports. I ...
0
votes
1answer
128 views

UFW blocks packets by the router, spams the log

While checking my systems logs I noticed this: Dec 30 19:45:24 Nick-Laptop kernel: [ 5324.288321] [UFW BLOCK] IN=eth0 OUT= MAC=01:00:5e:00:00:01:00:05:59:49:62:aa:08:00 SRC=192.168.2.1 DST=224.0.0.1 ...
0
votes
0answers
93 views

VPN won't connect while ufw is enabled

I use a paid VPN service which uses OpenVPN. It works great and I have been pleased with it for months now. Recently, I enabled, and began configuring, the firewall that is provided with Ubuntu ...
2
votes
2answers
285 views

UFW and firewall

So I recently installed ubuntu and I have been working with it no problem.While browsing through the security guides (specifically: https://wiki.ubuntu.com/BasicSecurity) I noticed this: "enable the ...
0
votes
0answers
106 views

my port is allowed by ufw but remains closed and connection is denied by ubuntu qbittorrent, Why?

my incoming port is allowed by ufw but remains closed and connection is denied by ubuntu qbittorrent, Why? ps: i have open DNS please help! thanks!
0
votes
0answers
56 views

UFW problem : can not access certain pages

Hello, I configured iptables using ufw to deny traffic from and to anywhere except my chosen ports. This is my /lib/ufw/user.rules : *filter :ufw-user-input - [0:0] :ufw-user-output - [0:0] ...
0
votes
0answers
613 views

13.10 firewall issue

I'm running kubuntu 13.10 on my netbook, which is mostly used just running around jacked into wifi hotspots. I recently set up the firewall with ufw using the steps in this: ...
0
votes
1answer
278 views

Are the Gufw default profiles empty?

I've just installed gufw on my notebook. I'm trying to setup my laptop with a very secure - roadwarrior - type of configuration. So the choices available in GUFW with a public, home and office profile ...
0
votes
0answers
243 views

Foraward Traffic from local machine to proxy server using iptables

I am using Ubuntu Server 12.04. My IP is 192.168.4.160. I want to route the HTTP traffic generated locally from my system destined to a particular URL (say x.x.x.x) to pass through proxy server. My ...
1
vote
1answer
447 views

Forward port to LXC guest using UFW

I am trying to forward port 2222 on my host 192.168.2.252 to a LXC guest on 10.0.3.11. How do I do it using the UFW-framework? In other words I want to do this but with the ufw-framework. iptables ...
0
votes
1answer
60 views

why opening a port is so difficult in ubuntu?

I have searched around and I have run these commands iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 5432 -j ACCEPT iptables-save > /etc/iptables.rules And I rebooted the box. I had no luck. ...
0
votes
0answers
166 views

I have UFW block messages from local network machines, how can I analyse if they are malicious?

I'm getting a lot of messages in my UFW log, and I'm trying to figure out if these are malicious or just normal. A UDP broadcast is coming from a windows laptop x.x.x.191, and some from our synology ...
0
votes
1answer
136 views

ufw before.rules file blank, does this impact setting up VPN server?

Hi all please assit i am trying to setup open-vpn following this link and currently having some issues. Easiest way to setup Ubuntu as a VPN server step 10 were I have to edit the ufw 10: This step ...
4
votes
1answer
1k views

Ban IP by country in UFW

I want to block a country in my server, but I don't know which rule I must use in UFW (or iptables). For example, people from US and other countries can see the site, but visitors from Russia can't. ...
0
votes
1answer
524 views

UFW, allow from wlan to eth

I would like to use my ubuntu 12.04 notebook as a wifi hotsport to my smatphone. Everything is going ok, using dnsmasq and hostapd and allowing ports 68 and 53 on UFW. But to access the web the UFW ...
-3
votes
2answers
154 views

What documentation and help resources are available for setting and examining UFW rules? [closed]

The guy who wrote ufw is too smart for me. Is there any documentation for any of the python code? Some things I'm trying to do are: Allow/close ports by number Get the currently set rules Remove ...
0
votes
1answer
1k views

Connecting to NAT virtualbox guest from bridged network

I've setup a Virtualbox Ubuntu 12.04 server using Vagrant. I can ssh to it and even ping my desktop from it. What doesn't work is to ping the guest OS from my desktop. I've tried to flush the ...
3
votes
1answer
123 views

UFW python documentation

I'm trying to access ufw with python, but on line 53 of backend.py, they raise a weird error that makes no sense: Traceback (most recent call last): File "mymodule.py", line 1467, in ...
1
vote
1answer
104 views

How does ufw handle conflicting rules?

I recently had the following conflicting rules on ufw 445/tcp ALLOW 192.168.1.0/24 445 DENY anywhere 445 DENY anywhere IPV6 ...
1
vote
0answers
914 views

SSH connections rejected after UFW allow 22

I am trying to setup UFW on a 12.04 server. SSH works great with UFW off. Setting root@ugvps:~# ufw enable Firewall is active and enabled on system startup root@ugvps:~# ufw status Status: active ...
1
vote
0answers
103 views

Google Talk > Gufw set to Deny/Deny does BLOCK. Please help

I have my Ubuntu 12.04 Server. I installed Google Talk in it. I opened gufw, and set it to deny/deny and there are no allow rules. Now firefox wont connect to the internet which is good... But... ...
1
vote
0answers
396 views

UFW Firewall Rules, has a hole in it. Please help

Can someone please look at the below output for me. I have my UFW on deny/deny, and here are the rules. But if I leave my Ubuntu Server on, with a Windows XP VM, and let Instant Messenger run in the ...
1
vote
1answer
212 views

Problem: Ufw Enabled with Deny/Deny, however SSH Inbound still works. Please help

In order to lock down my server, i installed ubuntu with ufw. I run a VM inside the server that hosts a ssh server. I opened the server and ran UFW and set Deny to send and Deny to Recieve. Now it ...
0
votes
2answers
363 views

Litle question about ufw command

Hi guys i would like to setup a specific rule for my ufw but i have the problem. How could i type this ? from ip adress 192.168.1.203 on interface eth0 alow port 80 I have on local pc ip address ...
0
votes
1answer
76 views

GUFW for console?

I like the GUFW, but need something similar for console. I mean an interactive software without need to remember all the command line keys. Could you suggest one?
3
votes
2answers
2k views

Why is ufw logging 'BLOCK' messages regarding a port for which ufw is configured to 'ALLOW' connections?

Here's an example log message: May 25 10:36:07 myserver kernel: [7057243.392334] [UFW BLOCK] IN=eth0 OUT= MAC=00:02:55:67:82:eb:00:06:b1:3a:ef:62:08:00 SRC=69.197.128.26 DST=192.168.100.101 LEN=44 ...
1
vote
2answers
1k views

ufw firewall operation

I have always run the program UFW as my firewall in Ubuntu, and been satisifed with its performance. When I installed Ubuntu 13.04, and enabled ufw, I was not able to access the internet, and all ...
2
votes
1answer
4k views

How do I allow local subnets in ufw?

I recently got IPv6 connectivity at home and now I would like to allow connections to my home server via IPv6 from the LAN only. The trick is that the IPv6 address/prefix assigned to the server is ...
0
votes
1answer
3k views

UFW 'default deny incoming' doesn't work

I have UFW enabled, 'default deny incoming' set and no any additional rules, but I still can access all ports from other PCs. I have to manually block each port. What can be wrong?
4
votes
2answers
4k views

What could be the cause for these strange UFW block entries in my syslog?

I've recently noticed a large number of recurring UFW blocks in my syslog. This surprised me as I have no UFW rules set: $ sudo ufw status verbose Status: active Logging: on (low) Default: deny ...
0
votes
1answer
814 views

How do I configure ufw to only allow outgoing/established connections for a IPv6 network?

How do I configure ufw to only allow outgoing/established connections for a IPv6 network? I am using an old computer with 12.04 installed to create an IPv6 router for my local network. I would like ...
1
vote
1answer
455 views

Setup firewall: ask user to allow new incoming/outgoing traffic?

I'm using Ubuntu 12.10 and as I know there is already a firewall on any ubuntu system. It's ufw and because I like fancy gui stuff I can use gufw, that's very nice. Now I would like to configure this ...
5
votes
1answer
3k views

Can I uninstall UFW completely?

I need to configure iptables manually and save and restore the rules using iptables-persistent package. so I don't want ufw anymore. I can simply disable it. but many chains are exists in iptables ...
2
votes
2answers
927 views

How can I cancel all the current communication from particular IP in Ubuntu 12.04?

I am working on Ubuntu 12.04 firewall. I want to deny any IP on runtime. I am using "ufw deny from IP". It's working for future connections. But it is not cancelling the existing connections like ssh. ...
3
votes
0answers
348 views

What do these lines in the UFW logfile mean?

These lines are repeated several times, first one at the time when remote ssh connection with the machine is lost (mac address is the address of eth used for Internet connection) Mar 24 21:20:32 ...
5
votes
2answers
1k views

Is it possible to block a webpage using ufw?

basically I have two machines X and Y. I want to block "http:// <IP-of-Y-Here> /AFolder/" from machine X on HTTP port 80 using ufw. Trivially, this can be completed (awfully) using ufw ...