ufw & iptables don't block incoming connection

Question

I enable ufw and I tried to block all the traffic from one server, but I can't.

It only blocks ssh, all the other ports are open. I test it with telnet.

I want to allow all ports for some IPs, and block all ports if the IP is not there.

I have these rules:

sudo ufw status verbose

Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), deny (routed)
New profiles: skip

UPDATE

Also, test from iptables

iptables --policy INPUT DROP

I tried telnet for ssh, is blocking but for other services, I can still access them.

Any ideas? I don't want to create default deny for outgoing, and then whitelist every port I want.

UPDATE

The problem is that the services are running inside the container. If I create a new listener with nc the firewall is blocking that connection.

How can I block the incoming traffic for containers?

Yes, I test it from another PC also, with VPN. But still the port is open. — pioupiou
– pioupiou, Commented Oct 25, 2019 at 17:02
I tried to block all the incoming traffic except from 2-3 IPs. But when i try to drop the input, same services they still listen. (Only ssh is really block) — pioupiou
– pioupiou, Commented Oct 25, 2019 at 18:22
How did you do that? If you block traffic from all IPs does it work as expected? ssh block might be due to the ssh config rather than firewall. — jsb
– jsb, Commented Oct 25, 2019 at 18:26

pioupiou · Accepted Answer · 2020-01-31 13:45:37Z

2

Because docker use also other Chains you have to block from DOCKER chain.

answered Jan 31, 2020 at 13:45

pioupiou

9261 gold badge10 silver badges23 bronze badges

Bruce Malaudzi · Accepted Answer · 2019-11-02 15:06:45Z

0

Assuming that the host you want to blacklist has an IP address of 10.20.20.3

$ sudo ufw deny from 10.20.20.3 to any
$ sudo ufw reload

answered Nov 2, 2019 at 15:06

Bruce Malaudzi

1,6551 gold badge7 silver badges11 bronze badges

2 Answers 2