Firewall with ufw
5 min read
UFW simplifies firewall management. Always allow SSH first to avoid locking yourself out: ufw allow ssh. Then allow needed ports: ufw allow 80, ufw allow 443, ufw default deny incoming, and ufw enable.
UFW Firewall
sudo ufw enable
sudo ufw status verbose
# Allow/deny ports
sudo ufw allow 22 # SSH
sudo ufw allow 80/tcp # HTTP
sudo ufw allow 443/tcp # HTTPS
sudo ufw deny 3306 # block MySQL from outside
# Allow from specific IP
sudo ufw allow from 192.168.1.10 to any port 5432
sudo ufw delete allow 80