CSEC_PUBLIC/How-To-Secure-A-Linux-Server
1
0
Fork 0
mirror of https://github.com/imthenachoman/How-To-Secure-A-Linux-Server.git synced 2025-12-06 17:22:53 +01:00
Code Issues Packages Projects Releases Wiki Activity

Changes to ufw

Browse Source 
1. added section about deleting ufw rules
2. changed wording in the ufw comments from "allow traffic out on port" to "allow traffic out to port". IMO the "on" sounds like opening source ports
3. added mail to common use-cases with ports 25 and 587
This commit is contained in:
sysadt
2023-02-22 22:16:02 +01:00
committed by GitHub
parent 8f78e027e9
commit 0df0fdbe28
1 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
README.md
View File

@@ -1445,10 +1445,10 @@ You can create rules by explicitly specifying the ports or with application conf
1. Allow additional traffic as per your needs. Some common use-cases: 1. Allow additional traffic as per your needs. Some common use-cases:
``` bash ``` bash
# allow traffic out on port 53 -- DNS # allow traffic out to port 53 -- DNS
sudo ufw allow out 53 comment 'allow DNS calls out' sudo ufw allow out 53 comment 'allow DNS calls out'
# allow traffic out on port 123 -- NTP # allow traffic out to port 123 -- NTP
sudo ufw allow out 123 comment 'allow NTP out' sudo ufw allow out 123 comment 'allow NTP out'
# allow traffic out for HTTP, HTTPS, or FTP # allow traffic out for HTTP, HTTPS, or FTP
@@ -1459,8 +1459,12 @@ You can create rules by explicitly specifying the ports or with application conf
# allow whois # allow whois
sudo ufw allow out whois comment 'allow whois' sudo ufw allow out whois comment 'allow whois'
# allow mails for status notifications -- choose port according to your provider
sudo ufw allow out 25 comment 'allow SMTP out'
sudo ufw allow out 587 comment 'allow SMTP out'
# allow traffic out on port 68 -- the DHCP client # allow traffic out to port 68 -- the DHCP client
# you only need this if you're using DHCP # you only need this if you're using DHCP
sudo ufw allow out 67 comment 'allow the DHCP client to update' sudo ufw allow out 67 comment 'allow the DHCP client to update'
sudo ufw allow out 68 comment 'allow the DHCP client to update' sudo ufw allow out 68 comment 'allow the DHCP client to update'
@@ -1542,6 +1546,14 @@ You can create rules by explicitly specifying the ports or with application conf
> 43/tcp (v6) ALLOW OUT Anywhere (v6) # allow whois > 43/tcp (v6) ALLOW OUT Anywhere (v6) # allow whois
> ``` > ```
7. Deleting a rule
``` bash
sudo ufw status numbered
[...]
sudo ufw delete 3 #line number of the rule you want to delete
```
#### Default Applications #### Default Applications
ufw ships with some default applications. You can see them with: ufw ships with some default applications. You can see them with: