Questions tagged [ufw]

Uncomplicated Firewall (ufw) is a frontend for iptables, works as a host-based firewall and provides a framework for managing netfilter, as well as a command-line interface for manipulating the firewall.

204 questions
56
votes
9 answers

UFW: Allow traffic only from a domain with dynamic IP address

I run a VPS which I would like to secure using UFW, allowing connections only to port 80. However, in order to be able to administer it remotely, I need to keep port 22 open and make it reachable from home. I know that UFW can be configured to allow…
Carles Sala
  • 985
  • 4
  • 9
  • 13
38
votes
1 answer

Do you need to reload after adding a rule in ufw?

Do you need to run any of these commands: sudo ufw reload sudo ufw disable sudo ufw enable after adding a rule via sudo ufw allow?
iLW
  • 483
  • 1
  • 4
  • 6
23
votes
6 answers

How can I enable ufw automatically on boot?

sudo ufw enable Firewall is active and enabled on system startup sudo ufw status Status: active But after I restart the system and run sudo ufw status, I get the message: Status: inactive How can I solve this problem? By the way, my…
guest
  • 231
  • 1
  • 2
  • 4
19
votes
1 answer

How can I disable UFW logging for a specific event?

My router sends out multicast packets in regular intervals that are blocked by UFW's standard policies. These events are harmless but spam my syslogs and ufwlogs. I can't change the router's behaviour as that would require installing a modified…
Glutanimate
  • 2,168
  • 4
  • 22
  • 38
19
votes
6 answers

Why does Debian come without a firewall enabled by default?

I'm using Debian 9.1 with KDE and I'm wondering why it comes without a firewall installed and enabled by default? gufw is not even in DVD1's packages. Are people expected to connect to the Internet before getting a firewall? Why? Even if all ports…
mYnDstrEAm
  • 4,008
  • 13
  • 49
  • 108
13
votes
4 answers

UFW is blocking DNS

I am configuring the security in my server. For easier the manage at the firewall, I installed the UFW. I did some settings in the UFW and I allowed some ports. Therefor when I enabled it the DNS services not responding. I tried running the command…
diegoklapper
  • 261
  • 1
  • 2
  • 7
12
votes
1 answer

UFW/IPTABLES not blocking DHCP UDP port 67?

I am running ubuntu 16.04. I have ufw installed and enabled. I also have isc-dhcp-server installed. I have not opened up UDP port 67, yet DHCP clients still seem to be able to obtain DHCP leases from the server. Why is this? I have reviewed the…
user1748155
  • 253
  • 1
  • 2
  • 8
9
votes
2 answers

Allow access to Apache on both port 80 and 443 in Ubuntu 16.04

I've just installed UFW 0.35 on Ubuntu 16.04: root@localhost:/etc# ufw --version ufw 0.35 Copyright 2008-2015 Canonical Ltd. and root@localhost:/etc# ufw app list Available applications: OpenSSH I would like to allow access to Apache on both…
en Peris
  • 361
  • 1
  • 3
  • 14
8
votes
1 answer

Creating UFW rule to allow application to use dynamic ports

I am currently trying to get a Google Chromecast device to work through my Ubuntu 13.04 based computer. Currently, the Google Chrome extension shows "no devices found" as long as my UFW firewall is enabled. If I disable the firewall, I am able to…
donutdan4114
  • 181
  • 1
  • 3
8
votes
3 answers

How to run graphical applications as root under wayland

Under the new Wayland display server, several applications requiring root permission fail to run. I actually have an answer (one way of working around the issue). I welcome any better solutions or criticisms. Many other answers to this issue…
ManSoMean
  • 81
  • 1
  • 4
8
votes
1 answer

How should i enable UFW: through "systemctl enable" or "ufw enable"?

I know two ways to start UFW: through systemctl and through ufw itself. For example, when i use systemctl enable ufw, i get this status: systemctl status ufw ● ufw.service - CLI Netfilter Manager Loaded: loaded…
DenisNovac
  • 285
  • 2
  • 3
  • 10
7
votes
1 answer

Uncomplicated Firewall (UFW) and UPNP

Is it possible to configured UFW to allow UPNP between computers in the home network? Everything works if I turn off the firewall. I can see in syslog the firewall is blocking me. I've tried all sorts of tips out there like open 1900, 1901, 5353,…
Halsafar
  • 266
  • 1
  • 4
  • 14
7
votes
1 answer

Best way to disable SSH for all users?

For security reasons I want to turn off SSH when I don't use it and turn it on again via a VNC connection as I can connect to my web server remotely over the Digitalocean control panel's console instead, and turn on SSH that way. Is below the best…
Gabriel
  • 79
  • 1
  • 1
  • 4
6
votes
2 answers

ufw blocks wireguard

I have set up wireguard and ufw using this guide. If ufw on the vpn server is enabled, it blocks some packets below (internet through the vpn on the client doesn't work). If ufw is disabled, the packets flow as expected. wg0 is a wireguard…
zyien1.denaro
  • 61
  • 1
  • 1
  • 2
6
votes
1 answer

ufw logs too much stuff, how can I disable that?

I happen to find out that syslog.1 takes 27 Gb and the logs in it have been inserted by the firewall ufw. How can I disable or reduce logging that much stuff into syslog by ufw?
Kolayn
  • 63
  • 1
  • 1
  • 4
1
2 3
13 14