UFW rules disappear after manually adding them to user.rules ubuntu 16.04
Clash Royale CLAN TAG#URR8PPP up vote
0
down vote
favorite
I need to add rules to ufw by editing the user.rules for some reason, when I add rules to it and do sudo ufw reload, the rules are gone. Any reason why this happens and how can I add rules by manually editing the user.rules file?
thanx in advance
ufw
asked Feb 16 at 16:03
Waqar Afridi
11
add a comment |Â
up vote
0
down vote
favorite
I need to add rules to ufw by editing the user.rules for some reason, when I add rules to it and do sudo ufw reload, the rules are gone. Any reason why this happens and how can I add rules by manually editing the user.rules file?
thanx in advance
ufw
asked Feb 16 at 16:03
Waqar Afridi
11
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I need to add rules to ufw by editing the user.rules for some reason, when I add rules to it and do sudo ufw reload, the rules are gone. Any reason why this happens and how can I add rules by manually editing the user.rules file?
thanx in advance
ufw
asked Feb 16 at 16:03
Waqar Afridi
11
I need to add rules to ufw by editing the user.rules for some reason, when I add rules to it and do sudo ufw reload, the rules are gone. Any reason why this happens and how can I add rules by manually editing the user.rules file?
thanx in advance
ufw
ufw
asked Feb 16 at 16:03
Waqar Afridi
11
asked Feb 16 at 16:03
Waqar Afridi
11
asked Feb 16 at 16:03
Waqar Afridi
11
asked Feb 16 at 16:03
Waqar Afridi
11
asked Feb 16 at 16:03
Waqar Afridi
11
11
add a comment |Â
add a comment |Â
1 Answer
1
active
oldest
votes
up vote
1
down vote
If you add your custom rules in /etc/ufw/before*.rules or after*.rules instead, it will not disappear after a reload.
When valid ufw commands are entered on the shell, i.e., custom user rules, they go into /etc/ufw/user*.rules files, and those persist.
root@ubuntu:~# ufw allow 22/tcp
Rule added
Rule added (v6)
root@ubuntu:~# grep tcp.*22 /etc/ufw/user*.rules
/etc/ufw/user6.rules:### tuple ### allow tcp 22 ::/0 any ::/0 in
/etc/ufw/user6.rules:-A ufw6-user-input -p tcp --dport 22 -j ACCEPT
/etc/ufw/user.rules:### tuple ### allow tcp 22 0.0.0.0/0 any 0.0.0.0/0 in
/etc/ufw/user.rules:-A ufw-user-input -p tcp --dport 22 -j ACCEPT
root@ubuntu:~# iptables -L -n | grep dpt:22
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
If you edit user*.rules directly, added rules (if valid) will be loaded in with ufw reload but will not persist at the next restart of the ufw service.
Therefore, add your custom rules in /etc/ufw/before*.rules or after*.rules instead.
References:
- https://serverfault.com/questions/198398/ubuntu-how-to-add-an-iptables-rule-that-ufw-cant-create
- https://bugs.launchpad.net/ufw/+bug/728128
answered Sep 3 at 7:07
Jeff
111
add a comment |Â
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
1
down vote
If you add your custom rules in /etc/ufw/before*.rules or after*.rules instead, it will not disappear after a reload.
When valid ufw commands are entered on the shell, i.e., custom user rules, they go into /etc/ufw/user*.rules files, and those persist.
root@ubuntu:~# ufw allow 22/tcp
Rule added
Rule added (v6)
root@ubuntu:~# grep tcp.*22 /etc/ufw/user*.rules
/etc/ufw/user6.rules:### tuple ### allow tcp 22 ::/0 any ::/0 in
/etc/ufw/user6.rules:-A ufw6-user-input -p tcp --dport 22 -j ACCEPT
/etc/ufw/user.rules:### tuple ### allow tcp 22 0.0.0.0/0 any 0.0.0.0/0 in
/etc/ufw/user.rules:-A ufw-user-input -p tcp --dport 22 -j ACCEPT
root@ubuntu:~# iptables -L -n | grep dpt:22
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
If you edit user*.rules directly, added rules (if valid) will be loaded in with ufw reload but will not persist at the next restart of the ufw service.
Therefore, add your custom rules in /etc/ufw/before*.rules or after*.rules instead.
References:
- https://serverfault.com/questions/198398/ubuntu-how-to-add-an-iptables-rule-that-ufw-cant-create
- https://bugs.launchpad.net/ufw/+bug/728128
answered Sep 3 at 7:07
Jeff
111
add a comment |Â
up vote
1
down vote
If you add your custom rules in /etc/ufw/before*.rules or after*.rules instead, it will not disappear after a reload.
When valid ufw commands are entered on the shell, i.e., custom user rules, they go into /etc/ufw/user*.rules files, and those persist.
root@ubuntu:~# ufw allow 22/tcp
Rule added
Rule added (v6)
root@ubuntu:~# grep tcp.*22 /etc/ufw/user*.rules
/etc/ufw/user6.rules:### tuple ### allow tcp 22 ::/0 any ::/0 in
/etc/ufw/user6.rules:-A ufw6-user-input -p tcp --dport 22 -j ACCEPT
/etc/ufw/user.rules:### tuple ### allow tcp 22 0.0.0.0/0 any 0.0.0.0/0 in
/etc/ufw/user.rules:-A ufw-user-input -p tcp --dport 22 -j ACCEPT
root@ubuntu:~# iptables -L -n | grep dpt:22
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
If you edit user*.rules directly, added rules (if valid) will be loaded in with ufw reload but will not persist at the next restart of the ufw service.
Therefore, add your custom rules in /etc/ufw/before*.rules or after*.rules instead.
References:
- https://serverfault.com/questions/198398/ubuntu-how-to-add-an-iptables-rule-that-ufw-cant-create
- https://bugs.launchpad.net/ufw/+bug/728128
answered Sep 3 at 7:07
Jeff
111
add a comment |Â
up vote
1
down vote
up vote
1
down vote
If you add your custom rules in /etc/ufw/before*.rules or after*.rules instead, it will not disappear after a reload.
When valid ufw commands are entered on the shell, i.e., custom user rules, they go into /etc/ufw/user*.rules files, and those persist.
root@ubuntu:~# ufw allow 22/tcp
Rule added
Rule added (v6)
root@ubuntu:~# grep tcp.*22 /etc/ufw/user*.rules
/etc/ufw/user6.rules:### tuple ### allow tcp 22 ::/0 any ::/0 in
/etc/ufw/user6.rules:-A ufw6-user-input -p tcp --dport 22 -j ACCEPT
/etc/ufw/user.rules:### tuple ### allow tcp 22 0.0.0.0/0 any 0.0.0.0/0 in
/etc/ufw/user.rules:-A ufw-user-input -p tcp --dport 22 -j ACCEPT
root@ubuntu:~# iptables -L -n | grep dpt:22
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
If you edit user*.rules directly, added rules (if valid) will be loaded in with ufw reload but will not persist at the next restart of the ufw service.
Therefore, add your custom rules in /etc/ufw/before*.rules or after*.rules instead.
References:
- https://serverfault.com/questions/198398/ubuntu-how-to-add-an-iptables-rule-that-ufw-cant-create
- https://bugs.launchpad.net/ufw/+bug/728128
answered Sep 3 at 7:07
Jeff
111
If you add your custom rules in /etc/ufw/before*.rules or after*.rules instead, it will not disappear after a reload.
When valid ufw commands are entered on the shell, i.e., custom user rules, they go into /etc/ufw/user*.rules files, and those persist.
root@ubuntu:~# ufw allow 22/tcp
Rule added
Rule added (v6)
root@ubuntu:~# grep tcp.*22 /etc/ufw/user*.rules
/etc/ufw/user6.rules:### tuple ### allow tcp 22 ::/0 any ::/0 in
/etc/ufw/user6.rules:-A ufw6-user-input -p tcp --dport 22 -j ACCEPT
/etc/ufw/user.rules:### tuple ### allow tcp 22 0.0.0.0/0 any 0.0.0.0/0 in
/etc/ufw/user.rules:-A ufw-user-input -p tcp --dport 22 -j ACCEPT
root@ubuntu:~# iptables -L -n | grep dpt:22
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
If you edit user*.rules directly, added rules (if valid) will be loaded in with ufw reload but will not persist at the next restart of the ufw service.
Therefore, add your custom rules in /etc/ufw/before*.rules or after*.rules instead.
References:
- https://serverfault.com/questions/198398/ubuntu-how-to-add-an-iptables-rule-that-ufw-cant-create
- https://bugs.launchpad.net/ufw/+bug/728128
answered Sep 3 at 7:07
Jeff
111
answered Sep 3 at 7:07
Jeff
111
answered Sep 3 at 7:07
Jeff
111
answered Sep 3 at 7:07
Jeff
111
111
add a comment |Â
add a comment |Â
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1006834%2fufw-rules-disappear-after-manually-adding-them-to-user-rules-ubuntu-16-04%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password