ufw

Strange dmesg UFW messages… lots of them

Strange dmesg UFW messages… lots of them I’ve done some digging but haven’t been able to find something that explains below message I found in dmesg? It’s obvious the UFW firewall is blocking something, but I am not having any success in tracking down what is causing it. [1170462.231472] [UFW BLOCK] IN=ens3 OUT= MAC=01:00:5e:00:00:01:d8:d5:b9:00:68:9c:08:00 SRC=0.0.0.0 …

Total answers: 1

How to define port forwarding

How to define port forwarding I run a server with a web server running as a rootless podman container. This exposes ports 10080 and 10443 because, as a rootless container, it is not allowed to expose ports 80 and 443. So that my website can be accessed from outside, I use ufw as a firewall …

Total answers: 1

UFW Couldn't determine iptables version

UFW Couldn't determine iptables version I am building a custom embedded Linux platform based on the NXP i.MX8 with Yocto. I want to use UFW to setup the firewall. When I boot the system and try to use UFW it returns an error Couldn’t determine iptables version. I have the iptables and nftables packages installed. …

Total answers: 1

strange entries in ufw log

strange entries in ufw log I have a very permissive firewall configuration, where I have almost all ports open: $ sudo ufw status verbose Status: active Logging: on (low) Default: allow (incoming), allow (outgoing), deny (routed) New profiles: skip To Action From — —— —- Anywhere ALLOW IN 127.0.0.1 Anywhere ALLOW IN 10.0.0.0/16 53 DENY …

Total answers: 1

Can not block torrent traffic in my Ubuntu 22.04 vps

Can not block torrent traffic in my Ubuntu 22.04 vps I have an Ubuntu 22.04 vps which I want to block all torrent traffic on it. I tried Iptables by this commands : iptables -I FORWARD -m string –algo bm –string "BitTorrent" -j DROP iptables -I FORWARD -m string –algo bm –string "BitTorrent protocol" -j …

Total answers: 1

UFW not blocking connection

UFW not blocking connection I am using the Cloudflare IPv4 and IPv6 lists to block all connections to my server from any IP that is not owned by Cloudflare. When I run sudo ufw status on the server I get: Status: active To Action From — —— —- 80,443/tcp ALLOW 173.245.48.0/20 # Cloudflare IP 80,443/tcp …

Total answers: 2

ufw (firewall) cant see active forward rules

ufw (firewall) cant see active forward rules I have a working port forward on my firewall (ufw). I can enable and disable the rule – and it works. What I dont understand is, that the rule cannot be seen when doing: ufw status That command only show open port on the firewall itself. My question …

Total answers: 1

Is there a way to use Cockpit while UFW is enabled?

Is there a way to use Cockpit while UFW is enabled? I currently have Ubuntu 20.04 installed. I’m having issues with UFW that are preventing me from using Cockpit. When I try to load IP:9090 into Firefox, it will just continuously try to load with a blank page nonstop. I also had an issues where …

Total answers: 1

How to access/view local web server via public IP?

How to access/view local web server via public IP? Good day everyone. I’m running an Ubuntu desktop 22.04. I’m new to linux world for about a month or so. I already configure my router for port forwarding. When I was developing this web app in windows, I got no problem with accessing it via public …

Total answers: 3

NFTables and g(ufw)

NFTables and g(ufw) I am going to install Xubuntu 22.04 on one of my computers and i have a question about firewall. As i understand Ubuntu use NFTables now. I have noticed some information about Debian (which is base for Ubuntu) using NFTables now. And Debian wiki says If you want to enable a default …

Total answers: 2

UFW not fully loading rules on startup

UFW not fully loading rules on startup I have a server with default deny and several UFW rules. UFW is enabled on startup (systemctl enable UFW). When I reboot only some of the rules don’t get applied properly and I can’t access some services. I can SSH into the server, and the lower ports (<1024) …

Total answers: 1

What is the behavior of a UFW rule that does not specify a protocol?

What is the behavior of a UFW rule that does not specify a protocol? This is such a basic question I was surprised I couldn’t find the answer, but here we are. With the following rule: 22 ALLOW 192.168.1.0/24 Are all protocols allowed or is TCP assumed? Asked By: Powerkey || Source This is directly …

Total answers: 1

My Ubuntu Server Ports got locked

My Ubuntu Server Ports got locked I just tried to join to my Jenkins on my VPS as usual. When I try to access the URL it returns the error code ERR_CONNECTION_TIMED_OUT. This happens as well with port 8080 for my website and other ports. I can join to my SSH session. The ports are …

Total answers: 1

Should I be concerned about these UFW blocked traffic?

Should I be concerned about these UFW blocked traffic? I just installed ufw on a newly provisioned Ubuntu 22.04 Server. It is currently set up to deny all traffic except ssh on an alternate port. I’m getting this pattern of blocked traffic: Oct 6 10:09:57 mydomain kernel: [ 285.236376] [UFW BLOCK] IN=eth0 OUT= MAC=[myMACaddress] SRC=92.63.197.132 …

Total answers: 1

SMTP IP forwarding to another machine

SMTP IP forwarding to another machine Apologies if this is a silly mistake this is the first time ive had to set up port forwarding. I have two machines I have one machine set up as a DMZ (192.168.0.67) when all traffic inbound will hit first. I have configured a second machine to be an …

Total answers: 1

Why is UFW blocking acces to SSH via Wireguard?

Why is UFW blocking acces to SSH via Wireguard? 192.168.100.50 is connected to 192.168.178.20 over the internet via wg0 interface. wg0 is opening up the tunnel 10.102.242.1/24. The wireguard client interface has 10.102.242.2. Through a static route on 192.168.100.1 I can connect from any device in 192.168.100.0/24 to the wireguard client using ssh admin@192.168.178.20 But …

Total answers: 1

Questions re ufw settings

Questions re ufw settings I have been running Ubuntu 20.04 desktop since last February, and I configured and enabled ufw at that time. I have questions on the output below. sudo ufw numbered To Action From [ 1] Anywhere ALLOW IN 192.168.0.0/24 [ 2] 80/tcp ALLOW IN Anywhere [ 3] 443/tcp ALLOW IN Anywhere [ …

Total answers: 1

What stops an attacker from breaking into your system without firewall?

What stops an attacker from breaking into your system without firewall? My question is short but concise. If you don’t configure a firewall, can someone "just ssh" and brute force into your system if they know your ip address? Asked By: stackcen || Source This answer assumes you are a desktop home user of Ubuntu. …

Total answers: 1

ufw "command not found"- but as the root user!

ufw "command not found"- but as the root user! My Debian 11 VPS is running now for about 2 weeks- and today I just wanted to analyse, why my traffic is ~70GiB (counted by bashtop). So somewhere in the net I read about nethogs, that this could help. So I installed it with my non-root, …

Total answers: 1

How can I block the internet but keep wifi available for RDP using UFW?

How can I block the internet but keep wifi available for RDP using UFW? I’m accessing my Ubuntu machine using RDP from a Windows desktop, in the same wifi network (that is, I’m only using RDP locally, not through the internet). I want to disable all internet traffic, but still allow WLAN traffic, because I …

Total answers: 2