Home / ubuntu / Questions / 1022385
In Process
alebal
Asked: 2018-04-06 14:33:15 +0800 CST

UFW ignores his rules

  • 772

I often search in the access.log for IP of services that do not interest me (E. Semrush, Mj12bot, Megaindex etc.) and add them to UFW.

But often adding the rule to UFW responds like this:

ufw deny from 46.229.173.137 to any;
Skipping adding existing Rule

The rule existed but was ignored?

After adding a rule I always do also:

ufw reload

And sometimes I also restart the server.

My server is on Vultr, Ubuntu 16.04 x64

Why are UFW's rules ignored? Is it Vultr's fault? Ubuntu's fault? UFW's fault?

ufw status here: https://pastebin.com/6HS1ZgiA (Too long to post here)

Example IP in acces.log: http://i63.tinypic.com/dnetu1.png

firewall ufw

1 Answers

  1. Maybe I found, it was the order of the rules.

    I have manually moved all the ALLOW rules down and all the DENY rules at the top in the file /etc/ufw/user.rules and reload ufw, and now the load on my server is MUCH lower .

    Maybe that was enough, in the coming days I still looking for blocked IP in my access.log, hoping not to find them.

    • 0