> For the complete documentation index, see [llms.txt](https://book.ice-wzl.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.ice-wzl.xyz/firewalls/ufw.md). # ufw ### Verify Status ``` sudo ufw status #output Status: inactive --OR-- Status: active Logging: on (low) Default: deny (incoming), allow (outgoing), deny (routed) New profiles: skip ``` ### Enable the FW ``` sudo ufw enable #output Firewall is active and enabled on system startup ``` ### Disable the FW ``` sudo ufw disable ``` ### See FW Rules ``` sudo ufw status #output Status: active To Action From -- ------ ---- Anywhere DENY 10.10.10.10 ``` ### Change the Default Policy ``` sudo ufw default deny outgoing sudo ufw default deny incoming ``` ### View ufw App List ``` sudo ufw app list | grep Nginx #output Nginx Full Nginx HTTP Nginx HTTPS ``` ### Block an IP Address/Subnet ``` sudo ufw deny from 10.10.10.10 sudo ufw deny from 10.10.10.10/24 ``` ### Block Incoming Connections to a Network Interface ``` sudo ufw deny in on eth0 from 10.10.10.10 ``` ### Allow Incoming Connections to a Network Interface ``` sudo ufw allow in on eth0 from 10.10.10.10 ``` ### Allow an IP in ``` sudo ufw allow from 10.10.10.10 ``` ### Deleting Rules ``` sudo ufw status numbered #output Status: active To Action From -- ------ ---- [ 1] Anywhere DENY IN 10.10.10.10 [ 2] Anywhere on eth0 ALLOW IN 10.10.10.11 #now delete the rule sudo ufw delete 1 ``` ### Allow by Application ``` sudo ufw allow “OpenSSH” #output Rule added Rule added (v6) ``` ### Disable by Application ``` #get status sudo ufw status Status: active To Action From -- ------ ---- OpenSSH ALLOW Anywhere Nginx Full ALLOW Anywhere OpenSSH (v6) ALLOW Anywhere (v6) Nginx Full (v6) ALLOW Anywhere (v6) #remove the service you want to deny sudo ufw allow "Nginx HTTPS" --OR-- sudo ufw delete allow "Nginx Full" ``` ### Credit and Further Reading