Unable to get Firewall to deny/allow any connections

[zeldarocks]

I recently installed ufw and gufw as the gui; I've attempted to set up my firewall in ufw, but to no avail. It seems like the firewall does not want to block any traffic regardless of the settings. I set it to deny outbound/inbound and I can still access the web without difficulty. What am I missing?

[karlchen]

Hello, zeldarocks.

Please, open a terminal window, run the commandline

Code: Select all

sudo ufw status verbose

and post the output here.

Kind regards,
Karl

[zeldarocks]

Status: active
Logging: on (low)
Default: reject (incoming), reject (outgoing)
New profiles: skip

To Action From
-- ------ ----
80 ALLOW IN Anywhere
443 ALLOW IN Anywhere
80 ALLOW IN Anywhere (v6)
443 ALLOW IN Anywhere (v6)

I have allowed http and https but blocked all else...

[karlchen]

Hello, zeldarocks.

Firewall software will go through the list of incoming/outgoing rules top down and apply the first matching rule.
Hence, in case the first rule ufw finds is the default rule: deny any incoming and outgoing traffic, it will do so.
Trying to soften this rule later on will not have any effect.
I am afraid you will have to consult the usfw manpages in order to find out how to make sure that the rules are created and stored in this order:

80 ALLOW IN Anywhere
443 ALLOW IN Anywhere
80 ALLOW IN Anywhere (v6)
443 ALLOW IN Anywhere (v6)
reject any other requests

Yet, I am not sure whether blocking absolutely all outgoing packages is really what you want and need.

Karl

[zeldarocks]

That IS the order the rules are in though. Can you elaborate on what needs to be done?

I've been toying around with it since yesterday, yet it won't actually follow directions.

[xenopeek]

That reminds me, I'm having problems with ufw; it doesn't want to follow instructions at all. Could you help me?

[xenopeek]

I'm installed both Firestarter and GUFW, and have been unable to get either of them to work: every time I specify deny/allow, it does not follow through with instructions; as if I had done nothing. I've tried reinstalling, uninstalling, using UFW on its own, and vice versa. I need to get this resolved ASAP.

[sammiev]

You can not use both of those programs together. When you make a change in a firewall you need to reset the firewall so the changes take place. Easiest way is to disable it and then re-enable it.

[3.14159]

That reminds me, I'm having problems with ufw; it doesn't want to follow instructions at all. Could you help me?

Are you making the changes as root (sudo)?

Describe what it is you do and what errors/messages/behaviors you are seeing.