Linux - UFW Firewall Setup (ufw)

preview_player
Показать описание

UFW is a simple firewall application that is included with Ubuntu nd can be installed on other distributions of Linux.

Note: For the demonstrations to work you may need to change settings or hardware configurations within your virtualization software. I had to connect my host machine to a hard word connection for Rules for specific IP Addresses to work.

sudo ufw status – shows current status of ufw
sudo ufw enable – Enables ufw firewall
By default ALL incoming traffic is blocked
sudo ufw disable – Disables ufw
sudo ufw status verbose – Shows all Rules currently configured for ufw
sudo ufw allow 21 – Allows specific port
sudo ufw allow ssh – Allows ports for a specific service
sudo ufw status numbered – Shows rules in numbered order so that you can delete specific rules
sudo ufw delete 1 – Deletes rule based on number
sudo ufw allow from 192.168.1.2 – Allows traffic from a specific IP address to all ports
sudo ufw allow from 192.168.1.0/24 – Allows traffic from a subnet to all ports
sudo ufw allow from 192.168.1.2 to any port 22 – Allows traffic from a specific IP address to a specific port
sudo ufw allow from 192.168.1.0/24 to any port 22 – Allows traffic from a subnet to a specific port
sudo ufw reset – Deletes all rules and disables ufw
Рекомендации по теме
Комментарии
Автор

Very informative video and Thank you so much for Adding those UFW commands on the description, It really make life lot easier.

mockingbird
Автор

Thank you for making these lessons free. God bless you brother.

ogunsadebenjaminadeiyin
Автор

Thank you so much for this series. I've learned a ton so far.

Chris.Wiley.
Автор

Thanks sir, your MCSC course was very worthy for me and God bless you

mohammedbarsad
Автор

Hey eli it's amazing that u made the learning new technologies much in ease manner, y don't u prefer doing videos about RPA(Robotic Process Autonation)

karthick
Автор

The wifi issue has to do with the router blocking certain ports for all devices on the LAN.

Some residential ISPs only allow you to use ports 80 and 443 .


This drove me crazy for days and I still could not change the configuration on my router.

danielsolomon
Автор

how to block a source port like "11211" memcache from any ip address using linux iptables

agelords
Автор

Greetings, a query, my pc connects wlan to router and assigns me an ip for its dhcp 10.10.1.10 if I have everything configured by default in ufw and I apply the following command: ufw deny from 10.10.1.0/24 with this I block any access from the internal network to my computer so that I can avoid any attack, what else can I do in the configuration apart from denying the ping response. sorry my bad english

geografiaeducativa
Автор

Hi,
Do I need to log in/authenticate UFW every time I search the internet/run an application?
In the terminal UFW shows active.

amytn
Автор

I'm sorry if this has been asked before. I activated ufw and read in the status that it should block everything at first, but it didn't. Is this normal, or specific to Linux Mint, or...? What do I need to do to get ufw working properly?

VulcanOnWheels
Автор

Allowing only a specific ip-address to access does not work if the client is using DHCP right?

aaron
Автор

cant figure out why ufw isnt working literally at all. keeps blocking all traffic no matter what rules i put in

airsofttrooper
Автор

sometimes the ftp service ufw doesn't let the ftp work and then when i write "ufw allow proto ftp to any port 21" it returns with "ERROR: Unsupported protocol 'ftp'". Is there a solution to my problem and why is this happening?

acbacbacbacbacb
Автор

what if you want it open to everyone except certain ip's or subnets? Like if I'm using Linux as a BBS server?

undergroundstudio
Автор

Does ufw do its work through IPTABLES?

AkamiChannel
Автор

3:12 - I want my specific _login_ to access SSH (and FTP) regardless of my IP address (I want to access the server from other systems without granting the system specifically access), but FTP and SSH have thus far thwarted my attempts to log in from outside my LAN. :-\

vnceigz
Автор

It's so simple rules like dog commands.

TheKent
Автор

my system is 10 years old should I start fresh to use this Linux

ronaldjorgensen