1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

root@4144e8c22fff:/# apt-get install ufw -y
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  file iptables libexpat1 libip4tc2 libip6tc2 libmagic-mgc libmagic1 libmnl0 libmpdec2 libnetfilter-conntrack3
  libnfnetlink0 libnftnl11 libpython3-stdlib libpython3.8-minimal libpython3.8-stdlib libreadline8 libsqlite3-0
  libssl1.1 libxtables12 mime-support netbase python3 python3-minimal python3.8 python3.8-minimal readline-common ucf
  xz-utils
Suggested packages:
  firewalld kmod nftables python3-doc python3-tk python3-venv python3.8-venv python3.8-doc binutils binfmt-support
  readline-doc rsyslog
The following NEW packages will be installed:
  file iptables libexpat1 libip4tc2 libip6tc2 libmagic-mgc libmagic1 libmnl0 libmpdec2 libnetfilter-conntrack3
  libnfnetlink0 libnftnl11 libpython3-stdlib libpython3.8-minimal libpython3.8-stdlib libreadline8 libsqlite3-0
  libssl1.1 libxtables12 mime-support netbase python3 python3-minimal python3.8 python3.8-minimal readline-common ucf
  ufw xz-utils
0 upgraded, 29 newly installed, 0 to remove and 1 not upgraded.
...
...
...省略

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

root@4144e8c22fff:/# ufw version
ufw 0.36
Copyright 2008-2015 Canonical Ltd.
root@4144e8c22fff:/# ufw --help

Usage: ufw COMMAND

Commands:
 enable                          enables the firewall
 disable                         disables the firewall
 default ARG                     set default policy
 logging LEVEL                   set logging to LEVEL
 allow ARGS                      add allow rule
 deny ARGS                       add deny rule
 reject ARGS                     add reject rule
 limit ARGS                      add limit rule
 delete RULE|NUM                 delete RULE
 insert NUM RULE                 insert RULE at NUM
 route RULE                      add route RULE
 route delete RULE|NUM           delete route RULE
 route insert NUM RULE           insert route RULE at NUM
 reload                          reload firewall
 reset                           reset firewall
 status                          show firewall status
 status numbered                 show firewall status as numbered list of RULES
 status verbose                  show verbose firewall status
 show ARG                        show firewall report
 version                         display version information

Application profile commands:
 app list                        list application profiles
 app info PROFILE                show information on PROFILE
 app update PROFILE              update PROFILE
 app default ARG                 set default application policy

1
2

root@4144e8c22fff:/# ufw enable
Firewall is active and enabled on system startup

1
2

root@4144e8c22fff:/# ufw status
Status: active

1
2
3

root@4144e8c22fff:/# ufw default deny 
Default incoming policy changed to 'deny'
(be sure to update your rules accordingly)

1
2

root@4144e8c22fff:/# ufw reload
Status: active

1
2

root@4144e8c22fff:/# ufw allow 80/tcp
Status: active

1
2
3
4
5
6
7

root@4144e8c22fff:/# ufw status
Status: active

To                         Action      From
--                         ------      ----
80/tcp                     ALLOW       Anywhere
80/tcp (v6)                ALLOW       Anywhere (v6)

1
2
3
4
5

root@4144e8c22fff:/# ufw delete allow 80/tcp
Rule deleted
Rule deleted (v6)
root@4144e8c22fff:/# ufw status
Status: active

1
2
3
4
5
6
7
8

root@4144e8c22fff:/# ufw allow from 192.168.12.1
Rule added
root@4144e8c22fff:/# ufw status
Status: active

To                         Action      From
--                         ------      ----
Anywhere                   ALLOW       192.168.12.1