Purpose of UFW Allow All Rules in FORWARD chain?
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
What's the purpose of the allow all rules put into the FORWARD chain by UFW? They're currently messing up the 5 ACCEPT rules I've put in place underneath. Unless there's some specific valid reason for the allow all rules that I'm not aware of, I'd like to be able to block everything and only allow forwarding for the 5 rules that I've created.
Also, is there any easy way to delete the allow all rules?
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
2770 980990 ufw-before-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
2770 980990 ufw-before-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-after-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-after-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-reject-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-track-forward all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.10.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.11.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.20.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.21.0/24
0 0 ACCEPT all -- tun0 * 10.8.1.0/24 10.0.24.0/21
iptables firewall ufw forwarding
asked 15 mins ago
Evan
1
New contributor
Evan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
up vote
0
down vote
favorite
What's the purpose of the allow all rules put into the FORWARD chain by UFW? They're currently messing up the 5 ACCEPT rules I've put in place underneath. Unless there's some specific valid reason for the allow all rules that I'm not aware of, I'd like to be able to block everything and only allow forwarding for the 5 rules that I've created.
Also, is there any easy way to delete the allow all rules?
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
2770 980990 ufw-before-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
2770 980990 ufw-before-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-after-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-after-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-reject-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-track-forward all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.10.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.11.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.20.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.21.0/24
0 0 ACCEPT all -- tun0 * 10.8.1.0/24 10.0.24.0/21
iptables firewall ufw forwarding
asked 15 mins ago
Evan
1
New contributor
Evan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
What's the purpose of the allow all rules put into the FORWARD chain by UFW? They're currently messing up the 5 ACCEPT rules I've put in place underneath. Unless there's some specific valid reason for the allow all rules that I'm not aware of, I'd like to be able to block everything and only allow forwarding for the 5 rules that I've created.
Also, is there any easy way to delete the allow all rules?
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
2770 980990 ufw-before-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
2770 980990 ufw-before-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-after-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-after-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-reject-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-track-forward all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.10.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.11.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.20.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.21.0/24
0 0 ACCEPT all -- tun0 * 10.8.1.0/24 10.0.24.0/21
iptables firewall ufw forwarding
asked 15 mins ago
Evan
1
New contributor
Evan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
What's the purpose of the allow all rules put into the FORWARD chain by UFW? They're currently messing up the 5 ACCEPT rules I've put in place underneath. Unless there's some specific valid reason for the allow all rules that I'm not aware of, I'd like to be able to block everything and only allow forwarding for the 5 rules that I've created.
Also, is there any easy way to delete the allow all rules?
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
2770 980990 ufw-before-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
2770 980990 ufw-before-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-after-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-after-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-reject-forward all -- * * 0.0.0.0/0 0.0.0.0/0
145 8700 ufw-track-forward all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.10.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.11.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.20.0/24
0 0 ACCEPT all -- tun0 * 10.8.0.0/24 10.0.21.0/24
0 0 ACCEPT all -- tun0 * 10.8.1.0/24 10.0.24.0/21
iptables firewall ufw forwarding
iptables firewall ufw forwarding
asked 15 mins ago
Evan
1
New contributor
Evan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 15 mins ago
Evan
1
New contributor
Evan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 15 mins ago
Evan
1
New contributor
Evan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 15 mins ago
Evan
1
asked 15 mins ago
Evan
1
1
New contributor
Evan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Evan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Evan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Evan is a new contributor. Be nice, and check out our Code of Conduct.
Evan is a new contributor. Be nice, and check out our Code of Conduct.
Evan is a new contributor. Be nice, and check out our Code of Conduct.
Evan is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f475285%2fpurpose-of-ufw-allow-all-rules-in-forward-chain%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
