Firewall – Deny from localhost with ufw

firewallufw

I have a service running on port 1339. Is it possible to deny requests from localhost to this port? Currently I have an ufw rule to allow requests from a specified IP but localhost can access the port as well. I don't want users logged in to the server access the url with curl or wget, the port should only be accessible from the specified IP. Is this possible?

Best Answer

I guess it should be possible, with something like this:

ufw deny from 127.0.0.1 to any port 1339

According to the ufw syntax, that's how you block a specific port on an specific IP.

Related Solutions

UFW/IPTables – Troubleshooting curl After Setting Default Outgoing Deny and Port 80 Allow

You didn't enable DNS traffic (TCP/UDP outgoing, port 53) and UDP 1024-65535 outgoing (also required for DNS.

Ubuntu – UFW Firewall Rules ordering

If you're interested in reordering your UFW rules, this is one way to do it.

$ sudo ufw status numbered

     To                         Action      From
     --                         ------      ----
[ 1] 22                         ALLOW IN    Anywhere
[ 2] 80                         ALLOW IN    Anywhere
[ 3] 443                        ALLOW IN    Anywhere
[ 4] 22 (v6)                    ALLOW IN    Anywhere (v6)
[ 5] 80 (v6)                    ALLOW IN    Anywhere (v6)
[ 6] 443 (v6)                   ALLOW IN    Anywhere (v6)
[ 7] Anywhere                   DENY IN     [ip-to-block]

Say you accidentally added a rule to the end, but you wanted up top.

First you will have remove it from the bottom (7) and add it back.

$ sudo ufw delete 7

Note, be careful of removing multiple rules one after another, their position can change!

Add back your rule to the very top (1):

$ sudo ufw insert 1 deny from [ip-to-block] to any

Best Answer

Related Solutions

UFW/IPTables – Troubleshooting curl After Setting Default Outgoing Deny and Port 80 Allow

Ubuntu – UFW Firewall Rules ordering

Related Topic