Uncomplicated Firewall (ufw)

learn more… | top users | synonyms

2
votes
2answers
11k views

How do I allow all possible IPs for Gmail servers through my ufw firewall?

I am currently using the following rule: ufw allow out from my_local_ip to any port 587 This is a little too lax for my liking. I would like to tighten it up and restrict it to only gmail's smtp ...
6
votes
2answers
4k views

What do UFW's audit log entries mean?

I'm sometimes getting a lot of these AUDIT log entries in ... [UFW AUDIT] IN= OUT=eth0 SRC=176.58.105.134 DST=194.238.48.2 LEN=76 TOS=0x10 PREC=0x00 TTL=64 ID=32137 DF PROTO=UDP SPT=36231 DPT=123 ...
1
vote
1answer
93 views

How to add a rule for loggin packets in ufw

I'm seeing a lot of connections with source 0.0.0.0 and destination 0.0.0.0 in conntrack. I want to log these packets which have source 0.0.0.0 and destination 0.0.0.0 so that I can digg this issue ...
7
votes
1answer
2k views

How to set an NFS network?

I want to merge information found here and there in order to record in one answer all steps to set my NFS network between my two Ubuntu PCs This is useful time to time, for example when switching to ...
1
vote
0answers
2k views

UFW Settings - Application Integration [closed]

I have installed the Ubuntu system, and deny both incoming and outgoing ports loosing internet access. Now I want access only for my Firefox that I have installed separately from the Firefox website ...
6
votes
1answer
17k views

What are ICMP redirects and should they be blocked?

After enabling ufw and the Tiger security auditor, I see warnings saying: The system accepts ICMP redirection messages What are ICMP redirection messages? Should they be disabled for security ...
3
votes
0answers
861 views

Why is UFW blocking outgoing connections?

UFW is blocking some outgoing connections on my server, such as Akismet, the spam killing plugin for my Wordpress site. According to Akismet's firewall info I need to allow contact with four IPs. My ...
2
votes
0answers
568 views

UFW give errors and won't auto start at boot [closed]

I just tried to enable ufw on my server, it gave me this error : ERROR: problem running ufw-init When I tried the second time, it worked. When I tried to set the default rule "sudo ufw default ...
3
votes
1answer
5k views

nfs is blocked by ufw even though ports are opened

I've set up an nfsv4 server and it's working fine, however the firewall is blocking nfs even if port 2049 and 111 are open. I know nfs uses some random ports that change at every boot, but how can i ...
2
votes
1answer
531 views

Looking for IPTABLES and UFW readily available, the best proven rules

ok i am up with UBUNTU finally, and liked the distro! particularly ufw, synaptic and software manager. as i am pretty blind newbie to linux, i need some help securing Ubuntu desktop. I've gone ...
2
votes
3answers
1k views

Why is Ubuntu permissive with outgoing connections by default?

I am pretty newbie to Linux, as most of computers for resources in my school use Linux, I just installed Ubuntu to learn. By default iptables and ufw sets policy as under: IPTABLES -P INPUT DROP ...
7
votes
4answers
13k views

What rules to use for UFW?

I've decided to enable the UFW that comes with Ubuntu just to make my system even more secure (especially after watching a video of a person whose computer actually got infected!), and I've enabled ...
2
votes
1answer
270 views

Enforce outgoing port for a machine inside LAN

I'm running Ubuntu Server (natty) in as a gateway/firewall in front of a private network. I have successfully enabled IP forwarding and NAT so the machines behind the firewall can connect to Internet ...
9
votes
1answer
771 views

Precautionary security measures for a home user? (firewall, antivirus, etc)

I just recently made the switch from Windows to Ubuntu, and I'm just a little paranoid when it comes to security measures. I've looked around and from what I've read, security is not as big a concern ...
5
votes
1answer
217 views

How do I accept inbound connections for a specific program?

Windows firewall allows to specify a program that will accept inbound connections no matter on which port(s) is listening (instead of specifying the port(s) to allow for that program). Is this ...
1
vote
4answers
5k views

Set UFW before.rules without restart of server

I use UFW on my Ubuntu server. Unfortunately there are no rules in UFW to port forward to another machine. What you need to do is edit /etc/before.rules and put routing commands there, for example # ...
3
votes
1answer
1k views

setting up ufw for a website, I want to to disallow everything except ssh, e-mail, and http

I have read the basic instructions here: https://help.ubuntu.com/community/UFW I want to sudo ufw default deny and then sudo ufw allow ssh sudo ufw allow smtp sudo ufw allow www sudo ufw allow ...
9
votes
2answers
3k views

potential ufw and fail2ban conflicts

Will running both fail2ban and ufw cause problems? I noticed that fail2ban modifies iptables rules, but ufw already has a ton of iptables rules defined... so I'm not sure if fail2ban will mess these ...
4
votes
1answer
1k views

How to connect to a CISCO VPN through UFW

I am running Ubuntu 11.04 (64 bits version) and would like to be able to get connected to the VPN server (CISCO) of my company. I am able to get connected to the VPN server when I disable UFW but, ...
6
votes
6answers
4k views

UFW firewall still blocking SMB despite adding rules

I have an Ubuntu PC with ufw firewall (GUI version). I have added the preset Samba service, in and out, and even tried adding the ports manually (135-139, 445, UDP and TCP, in and out), but it still ...
8
votes
3answers
6k views

See configured rules even when inactive

I'm wondering if it's possible to get UFW to list the configured firewall rules even when it's not enabled. I only have ssh access to the server at this time, and I don't want to enable UFW if there's ...
4
votes
3answers
6k views

Why UFW has to be (re)started at boot time if it's only iptables rule manager?

README from source package says: When installing ufw from source, you will also need to integrate it into your boot process for the firewall to start when you restart your system. Depending on your ...
33
votes
5answers
8k views

Why is the firewall disabled by default?

Why is ufw firewall included in Ubuntu, when it is not enabled and pre-configured by default? Most users don't even know it is there, because no GUI frontend is provided.
5
votes
2answers
931 views

Ubuntu comes with firewall by default?

I understand the Ubuntu comes with firwallul UFW is true? There is a GUI for it? if so, what is his name and where do I download? It is possible that UFW notify us (like in windows with a pop-up ...
5
votes
4answers
4k views

Is there a way to keep UFW logging out of dmesg?

There are comments in the /etc/rsyslog.d/20-ufw.conf file that give you the option to keep UFW-events from being logged to the kernel and message logs, which i have done. I would really like to get ...
3
votes
2answers
1k views

How to enable IPv6 via miredo along with UFW?

Ubuntu provides some good information on how to enable UFW and on how to enable IPv6 with miredo: https://wiki.ubuntu.com/UncomplicatedFirewall https://wiki.ubuntu.com/IPv6 But what is missing is ...
4
votes
3answers
2k views

Firewall Settings for Personal File Sharing

I have ufw set up to allow samba connections, but this does not seem to allow files to be transferred through Ubuntu's "Personal File Sharing" using the Public folder. The share can be seen, but not ...
5
votes
2answers
2k views

What does this UFW log mean?

CC-02 kernel [ 399.656733] [UFW BLOCK] IN=eth0 OUT= MAC= SRC=192.168.2.11 DST=192.168.2.22 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=14158 DF PROTO=TCP SPT=47368 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0 ...