So have a machine with multiple NICs and I'd like to allow all traffic on most of them (which are on private networks) but deny almost all traffic on one (wlp3s0). So I did the following:
sudo ufw reset
sudo ufw enable
sudo ufw deny in on wlp3s0
when I do a "sudo ufw status verbose" I see
Logging: on (full)
Default: allow (incoming), allow (outgoing), disabled (routed)
New profiles: skip
To Action From
-- ------ ----
Anywhere on wlp3s0 DENY IN Anywhere
Anywhere (v6) on wlp3s0 DENY IN Anywhere (v6)
Which is what I expected, yet I can still ssh into the machine via the network wlp3s0 is on, and when I run port scan the machine from that network from my macbook I see all sorts of services (ssh, pop3, imap, etc).
Any thoughts as to what I'm doing wrong?