Guides tagged “ufw”
Step-by-step MdmHost guides about ufw, sorted A-Z.
16 guides
Block an IP address or subnet with UFW
Block single IP addresses and whole CIDR ranges with ufw deny, place deny rules above your allow rules so they actually work, find attacking IPs in your logs and unblock them later.
Configure firewall rules for a Virtualizor VPS
Protect your VPS with firewall rules: use Virtualizor's firewall where your provider enables it, or configure UFW or firewalld inside the VPS without locking yourself out.
Delete, insert and reorder UFW rules safely
List UFW rules by number, delete them by number or by rule text, insert a rule at a set position and reset UFW without cutting off your own SSH session.
First steps after your Linux VPS is ready (SSH, updates, firewall)
Log in over SSH, change the root password, install updates, add a sudo user and switch on a firewall without locking yourself out.
How to install MongoDB on Ubuntu and secure it
Install MongoDB on Ubuntu from the official repository, enable authentication, create an admin user, and restrict access with bindIp and UFW.
Locked out by your firewall? How to get back into your VPS
If a firewall rule blocked SSH, you can still reach your server through the browser console in your VPS provider's control panel. Disable the firewall, fix the rule and turn it back on safely.
Open ports with UFW: single ports, ranges and trusted IPs
Open TCP and UDP ports in UFW, allow port ranges, limit access to one IP or subnet, label rules with comments and confirm everything with ufw status numbered.
Port forwarding and NAT with UFW before.rules
Forward a public port on your VPS to a backend server or VPN client with UFW. Turn on IP forwarding, add a nat table to before.rules, allow routed traffic and test from outside.
Rate-limit SSH and other ports with ufw limit
Use ufw limit to slow down SSH brute-force attempts. Learn how the 6-connections-in-30-seconds rule works, apply it to a custom SSH port, pair it with Fail2ban and test it.
Read and tune UFW firewall logs
Turn on UFW logging at the right level, find [UFW BLOCK] lines in the journal or ufw.log, read the SRC, DPT and PROTO fields and keep log volume under control.
Restrict outgoing traffic with UFW egress rules
Switch UFW to deny outgoing traffic by default, then allow only DNS, NTP, HTTPS and package mirrors. Block outbound SMTP and avoid breaking system updates along the way.
Set up a UFW firewall on Ubuntu and Debian
Set safe defaults, allow SSH before switching UFW on, open only the ports you use, limit sensitive ports to your own IP, and tidy up old rules.
Stop Docker from bypassing your UFW firewall
Docker-published ports skip UFW rules and stay open to the internet. Learn why it happens, how to bind ports to 127.0.0.1, how to filter with the DOCKER-USER chain and how to test from outside.
Test firewall changes safely with an automatic rollback
Schedule an automatic undo before you change firewall rules. If a mistake blocks SSH, the old rules come back by themselves a few minutes later.
UFW and IPv6: make sure your rules cover both
Check that UFW filters IPv6 as well as IPv4. Set IPV6=yes, read the (v6) rules in ufw status, allow or deny IPv6 sources and test your server from outside with nmap -6.
UFW vs firewalld vs nftables vs iptables: which Linux firewall to use
UFW, firewalld, nftables and iptables are not four rival firewalls. Learn how they fit together, what each distro uses by default and how to pick one tool for your VPS.
Browse by topic
- Getting startedYour first hour with a new server: access, logins and basics.69 guides
- cPanelFiles, databases, email, domains and every cPanel tool, step by step.37 guides
- WHM & resellingWHM, packages, reseller accounts, WHMReseller and running a hosting brand.49 guides
- WordPressInstall, secure, speed up, migrate and fix WordPress sites.40 guides
- Email & webmailMailboxes, webmail, forwarders, spam filters and email delivery.37 guides
- DomainsRegistering, transferring and managing domains and nameservers.20 guides
- SSL certificatesFree AutoSSL, Let's Encrypt, paid certificates and HTTPS.19 guides
- CloudLinuxCloudLinux setup and use: LVE limits, CloudLinux Manager, CageFS and PHP/Node.js selectors.31 guides
- LiteSpeedLiteSpeed Web Server, LSCache and the LiteSpeed Cache plugin: install, settings and tuning.30 guides
- Imunify360Malware scanning, firewall and proactive defence with Imunify360.23 guides
- SoftaculousInstall, update, clone and back up apps with Softaculous.23 guides
- WP SquaredcPanel's WordPress platform: sites, plugins, staging and backups.9 guides
- SitePadBuild and publish websites with the SitePad builder.9 guides
- SitejetDesign, edit and publish sites with the Sitejet builder.9 guides
- WHMResellerAlpha and master resellers with WHMReseller: install, setup and use.12 guides
- VirtFusionInstall, set up and manage VirtFusion: hypervisors, packages, servers and WHMCS integration.7 guides
- VirtualizorManage your VPS with Virtualizor: power, OS reinstall, VNC, IPs and backups.30 guides
- PleskWebsites, email, databases and settings in the Plesk panel.52 guides
- DirectAdminUsers, domains, email and reseller tools in DirectAdmin.40 guides
- WHMCSBilling, automation, products and client management with WHMCS.51 guides
- Control panelscPanel & WHM, Plesk, DirectAdmin and other panels on your VPS.106 guides
- SecurityKeys, passwords, firewalls and keeping a server patched.115 guides
- Networking & DNSIP addresses, reverse DNS, ports and traffic.34 guides
- Websites & appsWeb servers, WordPress, PHP, Node.js, SSL and app hosting.52 guides
- DatabasesMySQL, MariaDB, PostgreSQL, Redis and MongoDB on a VPS.64 guides
- Billing & accountInvoices, renewals, the client area and your account.9 guides
- TroubleshootingWhen something is not working: checks and fixes.68 guides
- Linux VPSSSH, packages, services and everyday Linux administration.70 guides
- Windows VPS & RDPRemote Desktop, Windows Server settings and Admin RDP tips.58 guides
- Docker & DevOpsContainers, Git deploys, automation, monitoring and backups.58 guides
Still stuck?
Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.
