https://nosubject.io/en/tags/ufw/Recent content in Ufw on No Subject - nosubject.io -Hugoen-USFri, 06 Dec 2019 21:14:37 +0900https://nosubject.io/en/ubuntu-19-10-firewall/Fri, 06 Dec 2019 21:14:37 +0900https://nosubject.io/en/ubuntu-19-10-firewall/<p>Since the machine connects directly to an external network over PPPoE, I enable the firewall.</p> <pre class="wp-block-code"><code>$ sudo ufw allow 80 $ sudo ufw allow 443 $ sudo ufw limit 22 $ sudo ufw enable</code></pre> <p>I exposed the web server and SSH. SSH password login was disabled beforehand.</p> <pre class="wp-block-code"><code>/etc/ssh/sshd_config PasswordAuthentication no</code></pre> <div class="wp-block-cocoon-blocks-balloon-ex-box-1 speech-wrap sb-id-3 sbs-think sbp-l sbis-cn cf block-box"><div class="speech-person"><figure class="speech-icon"><img src="https://nosubject.io/wp-content/uploads/2020/01/1038831.png" alt="Me" class="speech-icon-image"/></figure><div class="speech-name">Me</div></div><div class="speech-balloon"><p>Check the settings with an online <a rel="noreferrer noopener" aria-label="nmap (opens in a new tab)" href="https://pentest-tools.com/network-vulnerability-scanning/tcp-port-scanner-online-nmap" target="_blank">nmap </a> site or similar.</p>