Install UFW ​

Install and configure UFW firewall on the root server (Ubuntu/Debian)

UFW stands for Uncomplicated Firewall and is a simple frontend for iptables that significantly simplifies the administration of the server firewall.

1. Update system

   First update the system of your root server. Open the console and enter the following command:

   apt update && apt upgrade -y

   apt update && apt upgrade -y

2. Install UFW

   Install UFW by entering the following command in the console:

   apt install ufw

   apt install ufw

3. Check if the installation was successful

   Check whether the installation was successful by entering the following command:

   ufw status

   ufw status

   Default setting after installation: Status: inactive

4. set default rules

   We recommend blocking all incoming connections and only enabling the required ports:

   sudo ufw default deny incoming
   sudo ufw default allow outgoing

   sudo ufw default deny incoming
   sudo ufw default allow outgoing

5. Release SSH port (important!)

   Open the default SSH port (port 22) if you need it for remote access to the server:

   sudo ufw allow ssh

   sudo ufw allow ssh

   If your SSH port differs from the default configuration (port 22), use the correct port, e.g. 33

6. Enable other services (optional)

   HTTP (web server):

   sudo ufw allow http

   sudo ufw allow http

   HTTPS (SSL)

   sudo ufw allow https

   sudo ufw allow https

   Minecraft (default port 25565)

   sudo ufw allow 25565

   sudo ufw allow 25565

   Teamspeak 3 (example)

   sudo ufw allow 9987 # Voice
   sudo ufw allow 10011 # Query
   sudo ufw allow 30033 # File Transfer

   sudo ufw allow 9987 # Voice
   sudo ufw allow 10011 # Query
   sudo ufw allow 30033 # File Transfer

7. Enable UFW

   Activate the firewall:

   sudo ufw enable

   sudo ufw enable

   Confirm with y when asked. You can then check the status:

   sudo ufw status

   sudo ufw status

8. Manage rules

   Remove rules (e.g. HTTP port):

   sudo ufw delete allow http

   sudo ufw delete allow http

   Show all rules:

   sudo ufw status numbered

   sudo ufw status numbered

   Disable UFW (if necessary)

   sudo ufw disable

   sudo ufw disable