Ubuntu UFW防火墙总是在第一次阻止端口

debugcn 发表于 Dev

用户名

系统第一次启动时，ufw会阻止所有允许的端口。

如果我禁用ufw并再次启用，则它们开始被允许；

我不明白这个问题，请帮忙。

查看我的配置（请参阅1982）

To                         Action      From
--                         ------      ----
80                         ALLOW       Anywhere
443                        ALLOW       Anywhere
1982/tcp                   ALLOW       Anywhere
1:79/tcp                   DENY        Anywhere
1:79/udp                   DENY        Anywhere
81:442/tcp                 DENY        Anywhere
81:442/udp                 DENY        Anywhere
444:1981/tcp               DENY        Anywhere
444:1981/udp               DENY        Anywhere
1983:5431/tcp              DENY        Anywhere
1983:5431/udp              DENY        Anywhere
5433:65535/tcp             DENY        Anywhere
5433:65535/udp             DENY        Anywhere
5432/tcp                   ALLOW       Anywhere
5432/udp                   DENY        Anywhere
1982/udp                   ALLOW       Anywhere
80 (v6)                    ALLOW       Anywhere (v6)
443 (v6)                   ALLOW       Anywhere (v6)
1982/tcp (v6)              ALLOW       Anywhere (v6)
1:79/tcp (v6)              DENY        Anywhere (v6)
1:79/udp (v6)              DENY        Anywhere (v6)
81:442/tcp (v6)            DENY        Anywhere (v6)
81:442/udp (v6)            DENY        Anywhere (v6)
444:1981/tcp (v6)          DENY        Anywhere (v6)
444:1981/udp (v6)          DENY        Anywhere (v6)
1982/udp (v6)              ALLOW       Anywhere (v6)
1983:5431/tcp (v6)         DENY        Anywhere (v6)
1983:5431/udp (v6)         DENY        Anywhere (v6)
5433:65535/tcp (v6)        DENY        Anywhere (v6)
5433:65535/udp (v6)        DENY        Anywhere (v6)
5432/tcp (v6)              ALLOW       Anywhere (v6)
5432/udp (v6)              DENY        Anywhere (v6)

用户名

实际上，UFW重置仅不起作用，我在ubuntuforums上找到了此答案以重置iptables

https://ubuntuforums.org/showthread.php?t=1381516

 ##
   ## set default policies to let everything in
   ip6tables --policy INPUT   ACCEPT;
   ip6tables --policy OUTPUT  ACCEPT;
   ip6tables --policy FORWARD ACCEPT;

   ##
   ## start fresh
   ip6tables -Z; # zero counters
   ip6tables -F; # flush (delete) rules
   ip6tables -X; # delete all extra chains

# IPv4

   ## 
   ## set default policies to let everything in
   iptables --policy INPUT   ACCEPT;
   iptables --policy OUTPUT  ACCEPT;
   iptables --policy FORWARD ACCEPT;

   ##
   ## start fresh
   iptables -Z; # zero counters
   iptables -F; # flush (delete) rules
   iptables -X; # delete all extra chains

本文收集自互联网，转载请注明来源。

如有侵权，请联系[email protected] 删除。