Firewalls

[powersj]

Note:
This documentation has moved to a new home! Please update your bookmarks to the new URL for the up-to-date version of this page.

[potentialuser54]

Hi powersj,

The link to Shorewall is broken.

It should be

https://shorewall.org/

[livewirebt]

@powersj

# nat Table rules
*nat
:POSTROUTING ACCEPT [0:0]
        <
# Forward traffic from eth1 through eth0.
-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE
        <
# don't delete the 'COMMIT' line or these nat table rules won't be processed
COMMIT

Hello, please remove the white space in the blank lines. I marked them with < the the citation. UFW reported ERROR: problem running ufw-init after I added these lines. Removing the white space resolved the issue, but it may be difficult for new users to spot and correct such issues.

@powersj

sudo ufw --dry-run allow http

    *filter
    :ufw-user-input - [0:0]
    :ufw-user-output - [0:0]
    :ufw-user-forward - [0:0]
    :ufw-user-limit - [0:0]
    :ufw-user-limit-accept - [0:0]
    ### RULES ###
        <
    ### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0
    -A ufw-user-input -p tcp --dport 80 -j ACCEPT
        <
    ### END RULES ###
    -A ufw-user-input -j RETURN
    -A ufw-user-output -j RETURN
    -A ufw-user-forward -j RETURN
    -A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT]: "
    -A ufw-user-limit -j REJECT
    -A ufw-user-limit-accept -j ACCEPT
    COMMIT
    Rules updated

Probably the same issues here, but I have not tested these.

[sally-makin]

Thanks so much for taking the time to point this out. I’ve removed the blank spaces so hopefully it should work as intended now!