Firewall Basics (UFW)
Uncomplicated Firewall configuration for Linux servers.
UFW Basic Commands
# Enable firewall
sudo ufw enable
sudo ufw disable
sudo ufw status
sudo ufw reload
Allow Rules
# Allow by port
sudo ufw allow 22 # SSH
sudo ufw allow 80 # HTTP
sudo ufw allow 443 # HTTPS
# Allow by service
sudo ufw allow ssh
sudo ufw allow http
IP Rules
# Allow from IP
sudo ufw allow from 192.168.1.100
# Allow IP to port
sudo ufw allow from 192.168.1.100 to any port 22
# Deny IP
sudo ufw deny from 203.0.113.100
Delete Rules
# Show numbered rules
sudo ufw status numbered
# Delete by number
sudo ufw delete 2
# Delete by specification
sudo ufw delete allow 80
Advanced Rules
# Port ranges
sudo ufw allow 6000:6007/tcp
# Default policies
sudo ufw default deny incoming
sudo ufw default allow outgoing