Uncomplicated Firewall (ufw)

learn more… | top users | synonyms

2
votes
2answers
413 views

How to check if ufw is running programmatically

In most services (e.g. privoxy) there is a clean way to get the service status: ps -C [servicename] Then by checking the exit code ($?): 0: the service was running 1: not running This is not the case ...
0
votes
1answer
555 views

UFW blocks traffic in NAT

I've created a VM guest with libvirt with the default NAT Bridge. (Host and Guest Ubuntu 14.04 Server) After creating allow rules for SSH and enabling ufw - on the guest - i can't connect to the ...
0
votes
1answer
967 views

How to open ports 25, 80, 443, 3306 on Ubuntu 10.04

Fresh install of Ubuntu Server LTS 10.04 on a Rackspace next gen (Performance) server needs the following ports open: 25/tcp, 80/tcp, 443/tcp, 3306/tcp. I used nmap to check for open ports, here is ...
1
vote
1answer
1k views

using ufw to block outgoing traffic to website

I want to block traffic to a specific domain e.g. mysite.com. I tried blocking the ip address of the site but it does not work: ufw deny from 0.0.0.0 to ip_address_of_site I am still able to acess ...
1
vote
1answer
313 views

How do I remove all the ufw chains from iptables?

I've removed ufw and I want to get rid of all the chains it leaves behind. How can I do that easily?
0
votes
0answers
52 views

Writing exceptions in ufw to the default forwarding policy

I've tried setting DEFAULT_FORWARD_POLICY in /etc/default/ufw to both REJECT and ACCEPT and then writing rules to create exceptions to the default forward policy. No matter what I do, it appears to ...
0
votes
1answer
284 views

Setup NAT on Ubuntu 14.04

I'm trying to insert my desktop between an appliance and the rest of the network to monitor the traffic coming off of it due to some security concerns. I'd like to setup NAT so that the devices behind ...
2
votes
0answers
2k views

UFW for OpenVPN

I want to configure ufw (uncomplicated firewall) for OpenVPN. Connections are only allowed through OpenVPN. Everything else should be blocked. So if OpenVPN is disconnected -> no internet! I found ...
3
votes
1answer
528 views

ufw not blocking traffic

I have an apache2.4 webserver, and I am trying to block a malicious subnet using ufw. Here is the UFW setup: $ sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), ...
0
votes
0answers
99 views

Multiple rate limits in ufw

I have set two rate limits in ufw: In summary: limit http to 120 requests in 60 seconds; and 600 requests in 600 seconds -A ufw-user-input -p tcp --dport 80 -m state --state NEW -m recent --set -A ...
1
vote
1answer
578 views

Whitelist IPs for ufw

I have set some rules in ufw to rate limit connections, as such: -A ufw-user-input -p tcp --dport 25 -m state --state NEW -m recent --set -A ufw-user-input -p tcp --dport 25 -m state --state NEW -m ...
0
votes
0answers
29 views

How to configure ufw to allow ruby gem installs on 12.04?

I have the following setup: To Action From -- ------ ---- 10022 ALLOW IN Anywhere 80 ALLOW IN ...
0
votes
0answers
147 views

UFW behind a router blocks traffic from the outside world

I'm seeing [UFW BLOCK] entries in my logs, where SRC=173.194.67.16 DST=192.168.1.2. My box is behind a router, DST is my internal IP, SRC seems to some Google server and I don't understand how is it ...
1
vote
0answers
80 views

problem with UFW

Following this tutorial I executed the following commands: sudo apt-get install ufw sudo ufw allow ssh sudo ufw allow http sudo ufw enable sudo ufw status verbose and I get: Status: ...
0
votes
1answer
283 views

network bridge not forwarding traffic from span port on router

I want to run several security network tools in LXC containers like ntopng, suricata, snort, etc. I hooked one of my server's NIC's up to a port that is spanned to my firewall... so basically this ...
2
votes
0answers
44 views

ufw - How can I open up a port to a range of ip's (UB 14.04)

i wonder if you can help me. I want to open up a specific range of ips to port 22, e.g from 32.46.23.113 to 32.46.23.126, how would I do this with UFW? I've had a look at subnet masking and have seen ...
0
votes
1answer
233 views

Processes in docker cannot connect with ufw enabled

I'm trying to setup a server to use ufw with docker (via dokku.) When ufw is enabled, I cannot open connections from one container to another. When it's disabled, I can connect fine. As an example, I ...
0
votes
0answers
29 views

iptables debugging on ubuntu 12.04

ufw was blocking the incoming ssh connection. So removed and purged the ufw still the incoming ssh connection is blocked. But there is not logs in dmesg output. I am sure sshd is running, tested ...
0
votes
0answers
257 views

Ubuntu Server and ufw as a router - defining IP addresses that can be routed

I built following network with Ubuntu Server: Internet ---- eth0 (DHCP, NAT) -- Ubuntu1 -- (eth1 10.1.0.1/16) ------> <------ (eth0 10.1.0.2/16) -- Ubuntu2 -- (eth1 10.2.0.1/16) ------ ... ...
0
votes
3answers
1k views

The program 'iptables' is currently not installed

I am a newbie, so my apologies up front. I am trying to get DansGuardian installed (which I believe I have) and working. To get it working I need to filter IP traffic through the app via iptables. ...
0
votes
1answer
108 views

ICMP requests are blocked

I connected a Kubuntu 14.04 machine to a Debian 7.0 with a cross cable. The problem: ping is one-directional. Kubuntu machine can see Debian, but Debian can't ping Kubuntu. Notes: Firewall is ...
0
votes
1answer
32 views

before.rules date [closed]

I can't figure out why one of my before rules file has a date that is in the future. Today's date is July 3rd but the file time stamp states Jul 6. Below is the output from ls -l in the /etc/ufw ...
1
vote
0answers
317 views

Why aren't these ufw rules working?

I'm trying to configure ufw to only allow connections to 3 ip addresses on my local network, and deny everything else. Here's the commands I'm using: yes | sudo ufw reset sudo ufw default deny sudo ...
0
votes
1answer
394 views

ufw throws “bad port”

On Ubuntu Server, I try to open port 5432 for postgresql: $ sudo ufw allow 5432/TCP ERROR: Bad port Postgresql is not currently running and netstat shows no processes currently using that port. ...
0
votes
1answer
145 views

Iptables Issue can't SSH Remote Machines

I want to SSH to 192.168.1.15 Server from my machine, my ip was 192.168.1.99 Source Destination was UP, with IP 192.168.1.15. This is LAN Network there are 30 Machine's Connected to the network and ...
3
votes
3answers
2k views

14.04 missing “/etc/init.d/ufw”? my firewall never auto starts

I need to know how to fix the missing "/etc/init.d/ufw" file, is it some package or some command? I used the gufw to enable it, but on reboot my firewall was still off... I created a symlink ...
1
vote
0answers
1k views

Ubuntu UFW init failure

I have some strange UFW behaviour. Whenever I install it cleanly and add some allowed ports to it (without restarting) it works great. But when I restart UFW or the whole server for the first time ...
0
votes
1answer
373 views

configuration for ufw to allow upnp between desktop and xbox360

I am really stuck with this question. I am using Ubuntu 14.04 I cannot enable UFW to allow a connection between my desktop and Xbox 360 stream media when UFW is enbaled. The connection and streaming ...
1
vote
1answer
160 views

How to block ip forwarding for specific remote ip address

I use ubuntu as gateway for several hosts. I need advise how to block ip forwarding for specific ip address or specific ip range? I tried to block ip via ufw deny rules, but it looks like ip ...
4
votes
1answer
335 views

Docker is blocked by UFW

I have problem with Docker network in ubuntu 14.04. I have installed Docker.io from official repo and I've added DEFAULT_FORWARD_POLICY="ACCEPT" to /etc/default/ufw but my Docker containers still ...
1
vote
2answers
856 views

Uncomplicated Firewall blocks playing streames in VLC

Can anybody help me please how to allow IGMP protocol in UFW? My provider streams TV signal. I have .m3u8 file as channel list. It contains items as udp://@239.1.1.42:11111. VLC does not open the ...
6
votes
2answers
879 views

UFW rules don't work with docker

I have a 12.04.4 server, and I have enabled ufw, and have tried to block port 8080. However, it is still open. $ sudo ufw deny 8080 Rule added Rule added (v6) $ sudo ufw status numbered Status: ...
0
votes
1answer
185 views

Preseed file whith ufw command do not work

In Trusty the command ufw ufw/enable boolean true works very well, but the ufw ufw/allow_known_ports multiselect SSH do not work. Why?
3
votes
2answers
3k views

Redirect UFW logs to own file?

Is there a way I can easily redirect the entries for UFW to their own log file at /var/log/ufw instead of filling up /var/log/syslog as it's becoming tricky to find solutions to problems with all this ...
2
votes
1answer
439 views

ufw firewall disabled - How to turn it back on?

I am using Ubuntu 12.04 and just recently noticed, that my ufw-firewall is turned [off]. I know It's turned [off] by default, but when I set Ubuntu up, I turned [on] the firewall with: sudo ufw, but ...
0
votes
1answer
2k views

what does this mean “80/tcp filtered http”

Our linux server(ubuntu) stop listing on port 80. this is what i got : PORT STATE SERVICE 22/tcp open ssh 80/tcp filtered http what does this "80/tcp filtered http" means? What ...
1
vote
2answers
1k views

Problem with ufw enable: libkmod: ERROR ../libkmod/libkmod.c

I am trying to enable ufw and this is the output: root@p:~# ufw enable Command may disrupt existing ssh connections. Proceed with operation (y|n)? y ERROR: problem running ufw-init libkmod: ERROR ...
1
vote
1answer
135 views

How can I check what ports an app is using so I can enable them in ufw?

With the soon to be demise of Ubuntu One I started looking at other ways to store backup in the cloud. I already had the Dropbox client installed and have been storing back ups there for now. Not ...
2
votes
2answers
227 views

Why does DEFAULT INCOMING DENY not stop Firefox from working?

If UFW is actually not an application layer firewall but a "interface to iptables", how can it be if I have by DEFAULT INCOMING DENY and OUTGOING ALLOW setting that ANY internet application is ...
0
votes
1answer
354 views

UFW locks me out of server everytime I run it

Background: I'm setting up a new 12.04 instance on a VPS with a new provider.The VPS provider only offers a 32bit image but that really shouldn't matter here. I have no local access to the machine and ...
2
votes
1answer
290 views

Can't Get UFW Firewall to Allow Anything

I'm trying to set UFW (using GUFW) to create a firewall that only allows network connections when OpenVPN is connected. So in GUFW I deny incoming and outgoing connections and enable the Firewall. I ...
1
vote
3answers
333 views

Maybe abuse of my server

I have a vps at hetzner.de with vmware running several instances, one of them is an Ubuntu server 13.10, primarily acting as mysql-server for several websites. Today I received an email from hetzner, ...
0
votes
1answer
224 views

why Ubuntu Firewall not showing verbose?

Even Ubuntu Firewall in running mode , I am not getting the data. may I know why ? root@ubuntu:~# sudo ufw status numbered Status: inactive root@ubuntu:~# service ufw start start: Job is already ...
1
vote
2answers
365 views

Am I under attack?

When I checked my log viewer, I noticed that ufw is blockng many ips that I'm not familiar with! I have only three computers in my local network at the time when I was checking my log viewer I was ...
3
votes
2answers
1k views

UFW not blocking connections to docker instance

I have a webservice running inside a docker instance which was run using the following command: sudo docker run -d -p 4040:4040 .... My UFW rules look like this: ~ sudo ufw status Status: active ...
0
votes
2answers
360 views

How do I extract the source MAC from a [UFW BLOCK] entry?

I have the following UFW Block entry. How do I get the source MAC? I'm getting a ton from the same MAC=e8:11:32:cb:d9:42:54:04:a6:ba:22:f8:08:00 doing port scanning. If it matters, I'm using 12.04 ...
1
vote
0answers
181 views

Configuring ufw and iPredator VPN

I am running a VPN via IPredator on Ubuntu 12.04 Desktop, which works perfectly, when ufw is disabled. When I enable ufw, I logically cannot establish a connection. IPredator states that I have to ...
4
votes
2answers
4k views

how do you create an app profile for ufw?

Ufw has a command that lists out profiles to which you can further explore their profile definitions $ ufw app list And $ ufw app PROFILE {app profile title} I was wondering how you can ...
1
vote
2answers
304 views

Access computer on internal network from Internet

My setup: Ubuntu 13.10 server with ufw, facing outside world on eth0, IP forwarding and masquerading working OK. Internal network 192.168.0/24 on eht1, no problem accessing the internet. I need to ...
1
vote
2answers
1k views

How do I whitelist some connections by ip from being dropped by connlimit?

I'm using these rules in /etc/ufw/before.rules # Limit to 20 concurrent connections on port 80 per IP -A ufw-before-input -p tcp --syn --dport 80 -m connlimit --connlimit-above 20 -j DROP -A ...