Questions tagged [ufw]

Uncomplicated Firewall (ufw)

Filter by
Sorted by
Tagged with
0
votes
1answer
45 views

Unable to add rules to /etc/ufw/before.rules and before6.rules

I run a high-traffic NTP server and the following rules are absolutely necessary to prevent my conntrack table from being immediately overrun (regardless of how large it is): iptables -t raw -A ...
0
votes
0answers
28 views

why does UFW block ICMP destination-unreachable messages despite apparently having rules to allow them?

Ubuntu 20.04.2 LTS, I am running UFW with mostly default configuration, have allowed some ports through with "ufw allow" but haven't done any manual blocking or config files editing. I was ...
1
vote
0answers
32 views

Ufw blocks incoming and outgoing connections

To update firewall rules, reloading ufw ufw reload blocking incoming and outgoing connections for around 2 seconds, untill it completes reload process. I have set already the default policy deny for ...
0
votes
1answer
30 views

IPTABLES/UFW: Deny ssh (on alternate port) requests from WAN, and allow ssh (on alternate port) from LAN. HOW TO?

I am running Ubuntu server version 20.04. I have configured my ssh server to listen on an alternate port (port 40001) in my sshd_config file. I want to allow incoming traffic from anywhere on my local ...
2
votes
0answers
44 views

UFW status is getting problem running iptables

I want to use UFW (version 0.36) but I get this error when running ufw status: ERROR: problem running iptables: Another app is currently holding the xtables lock. Perhaps you want to use the -w option?...
1
vote
2answers
34 views

ClamAV and UFW on 18.04

I have loaded ClamAV: Ubuntu 18.04. Ran it and it found a bunch of junk that was deleted. I also installed ClamTK. My question is if I activate UFW (would prefer the GUI version) will it cause a ...
0
votes
0answers
14 views

How to make Network Interface can be use for specific user using UFW?

Suppose I have 2 user, user1 and user2 and I have 2 network interface eth1 and eth2 How to make user1 ONLY can use eth1 and user2 ONLY can use eth2? I see couple of guide many of them are recommend ...
2
votes
1answer
23 views

Redirect Network Traffic

I host a Minecraft server at home that I use to play with friends, which they all use to connect to via an OpenVPN server. The OpenVPN server has the IP (A.A.A.A) and the IP range for the VPN itself ...
2
votes
0answers
73 views

ufw block error seen in journalctl -xe command

I'm newbie in networking and system security. I am trying to create openconnect server which tutorial is found in this link. I have also seen the similar issues like this one, but they don't make ...
0
votes
0answers
57 views

Blocking countries IPs takes days

I followed a tutorial online on how to block traffic from other countries to my server through UFW rules. I downloaded the CIDR file for IPs from this website https://www.ip2location.com/free/visitor-...
0
votes
0answers
19 views

Configure server connection with UFW

I have a server configured to port XXX7. I want exernal client can connect to server through XXX8 port. But I need to prevent direct connetion to XXX7 port by client The server is running on OS Linux ...
1
vote
1answer
96 views

Cannot open port 3001 to local IPV4 ubuntu lts 20.04

I'm creating a back end app with NodeJs. My app running at port 3001. It is accessible when i try to access it with localhost:3001 or 0.0.0.0:3001 or 127.0.0.1:3001, but when I try to access it with ...
1
vote
1answer
34 views

Why I am Getting Lots of [UFW_BLOCK] Logs For Client's and Switches IP Addresses?

I have a MariaDB database server which is a node of my Galera Cluster and when I look at /var/log/ufw.log file, I see a lot of UFW_BLOCK logs for clients IP addresses which were connected to database ...
0
votes
0answers
44 views

How do I only allow outbound connections to Cloudflare IP addresses?

I have a Ubuntu 20.04.2 LTS webserver that is behind Cloudflare. I have ufw rules to only allow connections from Cloudflare IP ranges, and I want to do the same for outbound connections. I'm looking ...
1
vote
1answer
88 views

What should I do if my server is under the attack?

I have a mail server on Ubuntu 20.04. Yesterday I set up UFW firewall which looks like: root@vmi514622:~# ufw status verbose Status: active Logging: on (low) Default: deny (incoming), allow (outgoing),...
0
votes
1answer
129 views

How can I block outgoing traffic to a domain with all subdomains with UFW or IPTABLES?

I need to block all outgoing traffic to a domain with all its subdomains. I tried to do something like this: sudo ufw deny out from any to *.domain.com but of course it doesn't work because it needs ...
0
votes
2answers
58 views

Missing UFW file - WARNING “Couldn't stat '/etc/ufw/before.rules'”

I am trying to configure UFW on Ubuntu 20.04lts and this file is missing from my system and I get this warning "Couldn't stat '/etc/ufw/before.rules'". Is there any way to fix this? Thank ...
0
votes
0answers
38 views

How to forward all traffic between two ipsec tunnels?

I want to create vpn (IKEv2) tunnel with middle vpn server. Its should work like this schema - client -> middle (server A) -> output (server B). I'm using strongswan. This is my configs: ipsec....
1
vote
0answers
9 views

ufw differentiates block-and-log from unmatched log

I insert block rules using this kind of statements sudo ufw insert 1 deny log from 45.136.228.230/24 I have a few hundreds of such deny-log rules. ufw will block the IP and log the event. However, ...
0
votes
0answers
28 views

No system network if docker installed on Lubuntu

The weekend past I lost the ability to access my media server which is a NUC running Lubuntu, took up until last night to realise docker was the cause, with docker installed the machine is basically ...
0
votes
0answers
24 views

Block a web address intermittently to reduce usage

I would like to arrange the restriction described in this scenario: User visits a "greylisted" website Access is granted and a countdown timer (e.g. ten minutes) is started After the timer ...
1
vote
0answers
32 views

After restart UFW has problems

After a restart of the Ubuntu 18.04 server, I always noticed that services aren't available. If I use: UFW DISABLE and then UFW ENABLE, everything works fine until the next restart. In the log file ...
0
votes
1answer
46 views

Ufw blocking packages that should be allowed in configuration

I have 2 servers running Ubuntu 16.04. Server 1 has ip 10.100.100.101 and server 2 has ip 10.100.100.102. Server 1 has Ufw enabled and should accept all traffic to port 8080 from server 2. (Server 2 ...
0
votes
0answers
49 views

UFW and Ubuntu 20.04 LTS - Opening Ports Problem

I'm using Oracle for my VPS. This problem occurs on each Instance or VPS that I've created. Struggling for an entire week to get it resolved and I'm not winning. The issue is persistent on any port. ...
3
votes
1answer
135 views

UFW stopping FTP directory list

I have multiple users for my vsftpd instance that users can connect to. User1 home directory: /ftp/user1 - works fine User2 home directory: /ftp/user2 - works fine User3 home directory: /ftp - works ...
0
votes
1answer
129 views

ufw - ports open although closed by default deny

I'm absolutely newbee to Ubuntu and ufw. I' want to close everything except the modified ssh port. so i set up ufw like this: sudo ufw default deny incoming sudo ufw default allow outgoing sudo ufw ...
0
votes
0answers
92 views

Show UFW comment in IPTABLES

I started to use ufw for easier maintaince. For my telegraf plugin the iptables entry needs to have a comment added with -m comment --comment "myComment". UFW does have a comment feature, ...
2
votes
0answers
140 views

OpenVPN + UFW OVERKILL

I am using instructions found on Ask Ubuntu to configure my UFW to act as a "killswitch" for a potential dropped openvpn connection. My ufw rules are as follows: sudo bash -c "ufw -f ...
0
votes
0answers
46 views

command prompt freezed after enabling UFW (Ubuntu 18.04 server)

After enabling UFW on my server the command prompt freezed, meaning when I typed anything I couldn't see the input. I then opened another terminal window and connected to the server with no problem. ...
0
votes
0answers
100 views

How can Ngrok tunnel when ufw denies the port

This is a theoric question: I'm on Linux Ubuntu 20 and I've installed ngrok tunneling service to let my computer be reached from outside my local area network. I've started locally a webserver on http:...
0
votes
0answers
23 views

ufw / iptables need help

Can anybody help me with configuring ufw / iptables ... I have two interfaces on ubuntu server. LAN IP: 192.168.1.2 tun0 (OpenVPN) IP: 10.5.0.1 and openVPN client IP: 10.5.0.2 I would like to ...
0
votes
1answer
376 views

Enabling port 80 with iptables works but does not work with ufw

After creating a new compute instance in oracle cloud with ubuntu as the os, I installed nginx. Now to open port 80 I tried the commands sudo ufw allow 'Nginx HTTP' and enabled ufw. But still I couldn'...
1
vote
1answer
162 views

Warpinator and UFW

I have UFW set up to accept traffic across Port 42000, which is what Warpinator is using. Is there a way I can restrict that further to only computers on the internal network instead of leaving that ...
0
votes
1answer
85 views

NAT'ing a non-directly connected network

With the following UFW configuration added at the top of before.rules (besides all respective prerequisites such as enabling IP routing on the platform itself, changing default forward policy from ...
0
votes
1answer
91 views

UFW or iptables need help!

I have been using UFW for a long time. IT is great. There is one problem. I want to block all IPs (all countries) and just except incoming connections from the orange operator from Poland. Orange IP ...
0
votes
0answers
33 views

Ubuntu 18.04 UFW setup

I have one application running on two ports HTTP on 8080 and HTTPS on 8443. I want everyone to have access to port 8443 and whitelist 8080 to an IP, so only a particular IP can access the port. So I ...
1
vote
0answers
229 views

UFW enable freezes current SSH session port 22 open

Working on a VPN killswitch and playing with UFW. I'm experiencing a putty SSH session freeze when enabling UFW. Port 22 is open and it only freezes the session where the UFW enable command was sent ...
0
votes
1answer
554 views

How to set up iptables to access my apache2 server from public IP

I've got my Oracle Cloud instance on ubuntu 20.04 and I set up apache2 server. It's working from curl localhost but It doesn't work from my instance public IP. My ufw status: Status: active To ...
0
votes
0answers
27 views

Ufw unable to forward outside port to port 22 unless I open port 22, which is defeating the purpose of port forwarding

I would like to remote ssh to my server from outside using a different port then 22 (this is just to add an additional level of security, since I have noticed numerous attempts daily to access my ...
0
votes
0answers
41 views

Unable to SSH into Ubuntu server, after opening some random ports

I just open a port in the server using the below command and suddenly putty connection fails for everyone. This happens every time when I open a port. I think something is wrong with my command used ...
0
votes
0answers
82 views

Unable to use UFW while setting up new server

I have installed python3.6 on Ubuntu 20.04.1. Python - Python 3.6.10 pip 20.0.2 from /usr/local/lib/python3.6/site-packages/pip (python 3.6) sudo pip3 list Package Version --------- ------- ...
0
votes
1answer
64 views

Ubuntu server with cross cable connection to Keyence TCP/IP module gets refused

I'm doing a project with an Keyence camera module that scans and determines the height of an object. This data has to be transmitted to my server. To send and receive commands trough/from the keyence ...
0
votes
2answers
628 views

Why I cannot connect to MongoDB from outside while I have set its IP to 0.0.0.0 with no firewall?

First netstat -nltp output displays: tcp 0 0 0.0.0.0:27017 0.0.0.0:* LISTEN 1235/mongod So it seems that MongoDB is running on port 27017 and accept ...
0
votes
0answers
55 views

Is it safe to allow all port for local IPs in UFW?

Is it safe to allow all port for local IPs in UFW? I have a port forwarding set up on my router at a custom port for SSH reverse tunnelling to my SBC and it has 2FA on it. Thanks in advance!!
0
votes
0answers
358 views

Ubuntu Server 20.04 - Wireguard port forwarding with iptables

I know that this is a very frequent topic and that there are a lot of other posts with answers. though, It feels like i've tried all of them. None of them are exactly what i need so i finally decided ...
0
votes
0answers
35 views

Unable to connect with Port 80, 443 after I reboot my Ubuntu Server

I have a strange problem with my server. After rebooting the server I am not able to access my web pages on Port 80 and 443 from a remote machine. I can browse the index page on localhost but when I ...
0
votes
1answer
42 views

Can't access my computer from port 443

I run a webserver off port 443 in Ubuntu 20.04 server. About 20 minutes ago, it just stopped working all by itself, I haven't touched the computer in days, and no one else has either. It was working ...
0
votes
1answer
246 views

ufw delete allow 'Nginx HTTP': Could not delete non-existent rule, but it does exist

I have successfully set up nginx using these instructions, but one part has never worked for me, and that bothers me even though it does not seem to cause an problems. root@devtest:/home/dev-admin# ...
0
votes
0answers
34 views

What are the implications of using ufw or another firewall?

Probably a super simple question. I downloaded ufw on my two computers (one desktop, one laptop) and went with the default configuration of blocking all incoming traffic and allowing outgoing traffic. ...
0
votes
0answers
36 views

configure ufw outgoing log --log-level info --log-uid

How can I configure ufw to log ALL outgoing as --log-level info --log-uid I have been playing around with the files @ /etc/ufw, but I have been unable to generate the logs for ALL outgoing (including ...

1
2 3 4 5
13