UFW (Uncomplicated Firewall) Command Reference

Basic UFW Operations

• Enable the Firewall

  sudo ufw enable

• Disable the Firewall

  sudo ufw disable

• Check Firewall Status

  sudo ufw status

Allowing Traffic

• Allow Incoming Traffic on a Specific Port (e.g., SSH)

  sudo ufw allow <port_number>/tcp

• Allow Incoming Traffic on a Specific Port and Protocol (e.g., UDP)

  sudo ufw allow <port_number>/udp

• Allow Incoming Traffic from a Specific IP Address

  sudo ufw allow from <ip_address>

• Allow Incoming Traffic from a Specific IP Address and Port

  sudo ufw allow from <ip_address> to any port <port_number>

• Allow Incoming Traffic from a Specific IP Range

  sudo ufw allow from <ip_range>

• Allow Outgoing Traffic on a Specific Port (e.g., HTTP)

  sudo ufw allow out <port_number>/tcp

• Allow a Specific Application/Service (e.g., Apache Full)

  sudo ufw allow 'Apache Full'

Denying Traffic

• Deny Incoming Traffic on a Specific Port (e.g., FTP)

  sudo ufw deny <port_number>/tcp

• Deny Incoming Traffic from a Specific IP Address

  sudo ufw deny from <ip_address>

• Limit the Rate of Incoming Connections (e.g., SSH)

  sudo ufw limit <port_number>/tcp

Managing Rules

• Delete a Specific Rule by Its Rule Number

  sudo ufw delete <rule_number>

• Reset UFW to Default Settings

  sudo ufw reset

• Show Advanced UFW Options

  sudo ufw --help

• Show the List of Applications/Services That Can Be Enabled

  sudo ufw app list

• Enable a Specific Application/Service (e.g., OpenSSH)

  sudo ufw allow OpenSSH

• Disable a Specific Application/Service (e.g., OpenSSH)

  sudo ufw delete allow OpenSSH

• Enable Logging of UFW Actions

  sudo ufw logging on

• Disable Logging of UFW Actions

  sudo ufw logging off

• Reset UFW to Factory Defaults (Disable and Delete All Rules)

  sudo ufw --force reset

Example Commands for Apache and Nginx

• Allow Apache Traffic

  sudo ufw allow 'Apache Full'
  sudo ufw delete allow 'Apache'

• Allow Nginx Traffic

  sudo ufw allow 'Nginx Full'
  sudo ufw delete allow 'Nginx HTTP'

• Allow Specific Port (e.g., SSH)

  sudo ufw allow 22/tcp

• Deny Specific Port (e.g., HTTP)

  sudo ufw deny 80/tcp

iptables Command Reference

Basic iptables Operations

• List All Rules

  sudo iptables -L

• Flush (Reset) All Rules

  sudo iptables -F

Managing Rules

• Allow Incoming SSH Connections (Port 22)

  sudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT

• Allow Incoming Connections from a Specific IP Address

  sudo iptables -A INPUT -p tcp -s 192.168.1.100 -j ACCEPT

• Deny Incoming Connections from a Specific IP Address

  sudo iptables -A INPUT -p tcp -s 192.168.1.200 -j DROP

• Delete a Specific Rule by Its Line Number

  sudo iptables -D INPUT [line number]

This docs provides a quick reference for managing firewall rules with UFW and iptables. Make sure to adjust the port numbers, IP addresses, and service names according to your specific requirements.