Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #186092

Re: How can I enable ufw firewall tool with an existing set of iptables rules?

From "Alexander V. Makartsev" <avbetev@gmail.com>
Newsgroups linux.debian.user
Subject Re: How can I enable ufw firewall tool with an existing set of iptables rules?
Date 2017-08-28 22:50 +0200
Message-ID <ujz8R-1KT-7@gated-at.bofh.it> (permalink)
References <ujywa-1yp-19@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


Smart way to do it is to setup a cron job to run shell script that will
flush (or restore to default working ruleset) iptables rules every 10
minutes.
With this approach, even if you mess up your iptables rules and loose
ssh, you can simply wait for 10 minutes and reconnect to ssh.
Take your time and check that cron job is working correctly and if it
is, continue with ufw\iptables setup or correct mistakes.


On 29.08.2017 01:01, Tom Browder wrote:
> Installing and enabling ufw sounds easy, but how is the existing set
> of iptables rules treated?  I want to use ufw on a remote server and
> losing ssh would be disastrous!
>
> Thanks.
>
> -Tom
>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

How can I enable ufw firewall tool with an existing set of iptables rules? Tom Browder <tom.browder@gmail.com> - 2017-08-28 22:10 +0200
  Re: How can I enable ufw firewall tool with an existing set of  iptables rules? "Alexander V. Makartsev" <avbetev@gmail.com> - 2017-08-28 22:50 +0200
    Re: How can I enable ufw firewall tool with an existing set of  iptables rules? Tom Browder <tom.browder@gmail.com> - 2017-08-29 00:30 +0200
  Re: How can I enable ufw firewall tool with an existing set of  iptables rules? Joe <joe@jretrading.com> - 2017-08-28 23:00 +0200
    Re: How can I enable ufw firewall tool with an existing set of  iptables rules? Tom Browder <tom.browder@gmail.com> - 2017-08-29 00:40 +0200

csiph-web