UFW - Revision history

Kenneth: /* IPv6 */

2025-11-19T08:26:45Z

IPv6

← Older revision		Revision as of 08:26, 19 November 2025
Line 107:		Line 107:

	Add this to your .bashrc		Add this to your .bashrc

			== IPv4 ==

			Allow from any IPv4:
			sudo ufw allow from 0.0.0.0/0 to any port 8000 proto tcp comment "Something"

	== IPv6 ==		== IPv6 ==
Line 112:		Line 117:
	=== ipv6 allow local link ===		=== ipv6 allow local link ===

	sudo ufw allow from fe80::/64 to any port 22 proto tcp ~~common~~ "IPV6 LOCAL LINK SSH"		sudo ufw allow from fe80::/64 to any port 22 proto tcp comment "IPV6 LOCAL LINK SSH"

	== keywords ==		== keywords ==

Kenneth: /* Add Range */

2025-10-20T20:54:13Z

Add Range

← Older revision		Revision as of 20:54, 20 October 2025
Line 43:		Line 43:

	ufw allow proto udp from 10.0.0.0/24 to any port 138 comment "Samba"		ufw allow proto udp from 10.0.0.0/24 to any port 138 comment "Samba"

			ufw allow proto udp from 10.0.0.0/24 to any port 123 comment "NTP"

	ref: <ref>https://askubuntu.com/questions/646424/ufw-allow-range-of-ip-addresees</ref>		ref: <ref>https://askubuntu.com/questions/646424/ufw-allow-range-of-ip-addresees</ref>

Kenneth: /* keywords */

2025-10-07T05:56:21Z

keywords

← Older revision		Revision as of 05:56, 7 October 2025
Line 105:		Line 105:

	Add this to your .bashrc		Add this to your .bashrc

			== IPv6 ==

			=== ipv6 allow local link ===

			sudo ufw allow from fe80::/64 to any port 22 proto tcp common "IPV6 LOCAL LINK SSH"

	== keywords ==		== keywords ==

Kenneth: /* ufw */

2025-10-06T23:26:18Z

ufw

← Older revision		Revision as of 23:26, 6 October 2025
Line 16:		Line 16:
	sudo ufw allow 22/tcp comment "SSH"		sudo ufw allow 22/tcp comment "SSH"
	sudo ufw allow 53/tcp comment "DNS"		sudo ufw allow 53/tcp comment "DNS"
	sudo ufw allow 53/tcp comment "DHCP"		sudo ufw allow 67/tcp comment "DHCP"
			sudo ufw allow 68/tcp comment "DHCP"

	Disallow traffic		Disallow traffic
	sudo ufw deny 53/tcp comment "~~DHCP~~"		sudo ufw deny 6000/tcp comment "some service"

	Delete rule:		Delete rule:
	sudo ufw delete allow 53/tcp		sudo ufw delete allow 6000/tcp
	sudo ufw delete 1 # rule number from 'ufw status numbered'		sudo ufw delete 1 # rule number from 'ufw status numbered'

Kenneth: /* ufw */

2025-10-06T23:23:06Z

ufw

← Older revision		Revision as of 23:23, 6 October 2025
Line 16:		Line 16:
	sudo ufw allow 22/tcp comment "SSH"		sudo ufw allow 22/tcp comment "SSH"
	sudo ufw allow 53/tcp comment "DNS"		sudo ufw allow 53/tcp comment "DNS"
			sudo ufw allow 53/tcp comment "DHCP"

	Disallow traffic		Disallow traffic
	sudo ufw deny 53/tcp		sudo ufw deny 53/tcp comment "DHCP"

	Delete rule:		Delete rule:

Kenneth: /* Add Range */

2025-06-04T04:38:03Z

Add Range

← Older revision		Revision as of 04:38, 4 June 2025
Line 29:		Line 29:
	References:		References:
	* UFW - Community Help Wiki - https://help.ubuntu.com/community/UFW		* UFW - Community Help Wiki - https://help.ubuntu.com/community/UFW

			== Add IP Based Firewall Rule ==

			ufw allow from 10.0.0.100 port 111 proto udp comment "Server NFS"

	== Add Range ==		== Add Range ==

Kenneth: Created page with "== ufw == Enable firewall: sudo ufw enable Disable firewall: sudo ufw disable Show rules: sudo ufw status sudo ufw status numbered # rule numbers (for easy delete) sudo ufw status verbose # with port numbers Allow traffic: # sudo ufw allow 22/tcp sudo ufw allow 22/tcp comment "SSH" sudo ufw allow 53/tcp comment "DNS" Disallow traffic sudo ufw deny 53/tcp Delete rule: sudo ufw delete allow 53/tcp sudo ufw delete 1 # rule number from 'ufw status nu..."

2025-05-28T05:32:55Z

Created page with "== ufw == Enable firewall: sudo ufw enable Disable firewall: sudo ufw disable Show rules: sudo ufw status sudo ufw status numbered # rule numbers (for easy delete) sudo ufw status verbose # with port numbers Allow traffic: # sudo ufw allow 22/tcp sudo ufw allow 22/tcp comment "SSH" sudo ufw allow 53/tcp comment "DNS" Disallow traffic sudo ufw deny 53/tcp Delete rule: sudo ufw delete allow 53/tcp sudo ufw delete 1 # rule number from 'ufw status nu..."

New page

== ufw ==

Enable firewall:
sudo ufw enable

Disable firewall:
sudo ufw disable

Show rules:
sudo ufw status
sudo ufw status numbered # rule numbers (for easy delete)
sudo ufw status verbose # with port numbers

Allow traffic:
# sudo ufw allow 22/tcp
sudo ufw allow 22/tcp comment "SSH"
sudo ufw allow 53/tcp comment "DNS"

Disallow traffic
sudo ufw deny 53/tcp

Delete rule:
sudo ufw delete allow 53/tcp
sudo ufw delete 1 # rule number from 'ufw status numbered'

Rules are written to:
/lib/ufw/user.rules

References:
* UFW - Community Help Wiki - https://help.ubuntu.com/community/UFW

== Add Range ==

sudo ufw allow proto tcp from 192.168.1.16/28 to 192.168.1.48 port 80

sudo ufw allow proto tcp from 192.168.1.0/27 to 192.168.1.48 port 80

ufw allow proto udp from 10.0.0.0/24 to any port 138 comment "Samba"

ref: <ref>https://askubuntu.com/questions/646424/ufw-allow-range-of-ip-addresees</ref>

== Delete Range ==

ufw status numbered

Example, delete from 31 to 18:
for i in `seq 31 -1 18`; do ufw -f delete $i ; done

== UFW Applications ==

/etc/ufw/applications.d/apache
<pre>
[Apache]
title=Web Server
description=Apache v2 is the next generation of the omnipresent Apache web server.
ports=80/tcp

[Apache Secure]
title=Web Server (HTTPS)
description=Apache v2 is the next generation of the omnipresent Apache web server.
ports=443/tcp

[Apache Full]
title=Web Server (HTTP,HTTPS)
description=Apache v2 is the next generation of the omnipresent Apache web server.
ports=80,443/tcp
</pre>

/etc/ufw/applications.d/terraria
<pre>
[Terraria]
title=Terraria Server
description=Terraria Server
ports=7777/tcp
</pre>

Make sure the application rule is not group writable:
chmod 644 [RULE_FILE]

List applications:
ufw app list

Application info:
ufw app info [APP]

Allow:
ufw allow Apache
ufw allow terraria

==== Disable Logging ====

To stop UFW from logging to dmesg, disable logging completely: [https://askubuntu.com/questions/10836/is-there-a-way-to-keep-ufw-logging-out-of-dmesg]
sudo ufw logging off

OR BETTER YET...

# alias dmesg='dmesg | grep -v UFW'
alias dmesg='dmesg --color=always | grep -v UFW --color=always'

Add this to your .bashrc

== keywords ==