ubuntu防火墙设置（Ubuntu防火墙设置）.docVIP

ubuntu防火墙设置（Ubuntu防火墙设置） Ubuntu 9.10 defaults to the UFW firewall, which already supports interface operations. Running the UFW command on the command line allows you to see a series of actions that can be prompted. One of the simplest operations: sudo, UFW, status, check the firewall status, my return is: inactive Sudo UFW version firewall version: UFW 0.29-4ubuntu1 Copyright 2008-2009, Canonical, Ltd. The Ubuntu system has been installed by default by ufw. 1. installation Sudo apt-get install UFW 2. enabled Sudo UFW enable Sudo UFW default deny After running the above two commands, the firewall is opened and automatically opened when the system is started. Turn off all external access to the local machine, but this machine accesses external normal. 3. enable / disable Sudo UFW allow|deny [service] Open or close a port, for example: Sudo UFW allow SMTP allows all external IP access to native 25/tcp (SMTP) ports Sudo UFW allow 22/tcp allows all external IP access to native 22/tcp (SSH) ports Sudo UFW allow 53 allows external access to port 53 (tcp/udp) Sudo UFW allow from 192.168.1.100 allows this IP to access all native ports Sudo, UFW, allow, proto, UDP, 192.168.0.1, port, 53, to, 192.168.0.2, port, Sudo UFW deny SMTP prohibits external access to SMTP services Sudo UFW delete allow SMTP removes a rule created above 4. check firewall status Sudo UFW status General users only need the following settings: Sudo apt-get install UFW Sudo UFW enable Sudo UFW default deny The above three commands are already safe enough to open if you need to open some services and then use sudo UFW allow. Turn on / off the firewall (the default setting is Disable ) Sudo UFW enable|disable Convert log status Sudo UFW logging on|off Set the default policy (for example, mostly open, vs, mostly, closed) Sudo UFW default allow|deny Permission or shielding port (you can see the list of services in status). You can specify a service name that exists in /etc/services by the protocol: port, or th