0

So have a machine with multiple NICs and I'd like to allow all traffic on most of them (which are on private networks) but deny almost all traffic on one (wlp3s0). So I did the following:

sudo ufw reset

sudo ufw enable

sudo ufw deny in on wlp3s0

when I do a "sudo ufw status verbose" I see

Status: active

Logging: on (full)

Default: allow (incoming), allow (outgoing), disabled (routed)

New profiles: skip

To Action From

-- ------ ----

Anywhere on wlp3s0 DENY IN Anywhere
Anywhere (v6) on wlp3s0 DENY IN Anywhere (v6)

Which is what I expected, yet I can still ssh into the machine via the network wlp3s0 is on, and when I run port scan the machine from that network from my macbook I see all sorts of services (ssh, pop3, imap, etc).

Any thoughts as to what I'm doing wrong?

Justin

New contributor
Justin Oelgoetz is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.

Your Answer

Justin Oelgoetz is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.