UFW Uncomplicated Fire Wall

[benderb]

First, make sure UFW (Uncomplicated Fire Wall) is installed. It should be installed by default in Ubuntu, but if it’s not, you can install the package using apt-get.

IMPORTANT:
We’re going to add a firewall rule to permit your SSH connection on port 22/tcp. That is the default SSH port. If you have changed it to something else, you must modify the rule below to reflect your required port number. Failure to do so will break your SSH connection and lock you out of the server as soon as you enable the firewall!

Confirm UFW is installed:

sudo apt-get install ufw

*Set the default access rules:**

sudo ufw default deny incoming

sudo ufw default allow outgoing

Set the service rules (SSH / HTTPS):

sudo ufw allow 22/tcp

sudo ufw allow 443/tcp

Enable the firewall:

sudo ufw enable

Check the Firewall status:

sudo ufw status

If you ever add or delete rules you should reload the firewall:

sudo ufw reload

If you ever need to turn off the firewall:

sudo ufw disable

 

[benderb]

Fail2ban (optional, recommended)

Fail2ban is an intrusion prevention software framework which protects computer servers from brute-force attacks.

Install:

sudo apt-get update

sudo apt-get install fail2ban

Press Y when prompted to proceed with the install.

 

[redhat]

Thanks for sharing

Please use the correct BBcodes for the shell command parts of your messages!

I just edit your last message. Please edit your first message with the correct BBcodes Formation.

 

[DreamAL]

First, make sure UFW (Uncomplicated Fire Wall) is installed. It should be installed by default in Ubuntu, but if it’s not, you can install the package using apt-get.

IMPORTANT:
We’re going to add a firewall rule to permit your SSH connection on port 22/tcp. That is the default SSH port. If you have changed it to something else, you must modify the rule below to reflect your required port number. Failure to do so will break your SSH connection and lock you out of the server as soon as you enable the firewall!

Confirm UFW is installed:

sudo apt-get install ufw

*Set the default access rules:**

sudo ufw default deny incoming

sudo ufw default allow outgoing

Set the service rules (SSH / HTTPS):

sudo ufw allow 22/tcp

sudo ufw allow 443/tcp

Enable the firewall:

sudo ufw enable

Check the Firewall status:

sudo ufw status

If you ever add or delete rules you should reload the firewall:

sudo ufw reload

If you ever need to turn off the firewall:

sudo ufw disable

thanks

 

[DreamAL]

Fail2ban (optional, recommended)

Fail2ban is an intrusion prevention software framework which protects computer servers from brute-force attacks.

Install:

sudo apt-get update

sudo apt-get install fail2ban

Press Y when prompted to proceed with the install.

hello, after installation do you leave everything by default or are there other tricks?

 

[bojep]

First, make sure UFW (Uncomplicated Fire Wall) is installed. It should be installed by default in Ubuntu, but if it’s not, you can install the package using apt-get.

IMPORTANT:
We’re going to add a firewall rule to permit your SSH connection on port 22/tcp. That is the default SSH port. If you have changed it to something else, you must modify the rule below to reflect your required port number. Failure to do so will break your SSH connection and lock you out of the server as soon as you enable the firewall!

Confirm UFW is installed:

sudo apt-get install ufw

*Set the default access rules:**

sudo ufw default deny incoming

sudo ufw default allow outgoing

Set the service rules (SSH / HTTPS):

sudo ufw allow 22/tcp

sudo ufw allow 443/tcp

Enable the firewall:

sudo ufw enable

Check the Firewall status:

sudo ufw status

If you ever add or delete rules you should reload the firewall:

sudo ufw reload

If you ever need to turn off the firewall:

sudo ufw disable

Thanks for sharing

 

[Trijo12]

thank you very much

 

[FMmarcus]

thank you for sharing this buddy