I am a Software Engineer from India. I am currently building Daestro. I work in Rust, Javascript and Python. Zola 2025-09-09T00:00:00+00:00 https://vshukla.com/tags/ufw/atom.xml 2025-09-09T00:00:00+00:00 2025-09-09T00:00:00+00:00 Vivek Shukla https://vshukla.com/snippets/ufw-cheat-sheet/

UFW stands Uncomplicated Firewall which provides simple interface over iptables to create host based firewall for IPv4 or IPv6

<h2 id="check-status"><a class="zola-anchor" href="#check-status" aria-label="Anchor link for: check-status">🔗</a>Check status</h2> <pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw status</span></span> <span class="giallo-l"></span> <span class="giallo-l"><span class="z-comment"># or</span></span> <span class="giallo-l"></span> <span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw status verbose</span></span> <span class="giallo-l"></span> <span class="giallo-l"><span class="z-comment"># or</span></span> <span class="giallo-l"></span> <span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw status numbered</span></span></code></pre><h2 id="delete-value-based-on-number"><a class="zola-anchor" href="#delete-value-based-on-number" aria-label="Anchor link for: delete-value-based-on-number">🔗</a>Delete value based on number:</h2> <pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw delete</span><span class="z-constant z-numeric"> 5</span></span></code></pre><h2 id="allow-port"><a class="zola-anchor" href="#allow-port" aria-label="Anchor link for: allow-port">🔗</a>Allow port</h2> <pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw allow 22/tcp</span></span></code></pre><h2 id="deny-port"><a class="zola-anchor" href="#deny-port" aria-label="Anchor link for: deny-port">🔗</a>Deny port</h2> <pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw deny 80/tcp</span></span></code></pre><h2 id="allow-from-ip-address-or-subnet"><a class="zola-anchor" href="#allow-from-ip-address-or-subnet" aria-label="Anchor link for: allow-from-ip-address-or-subnet">🔗</a>Allow from ip address or subnet</h2> <pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw allow from 10.22.96.0/20</span></span></code></pre><h2 id="allow-from-ip-address-to-specific-port"><a class="zola-anchor" href="#allow-from-ip-address-to-specific-port" aria-label="Anchor link for: allow-from-ip-address-to-specific-port">🔗</a>Allow from ip address to specific port</h2> <pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw allow from 10.22.96.0/20 proto tcp to any port</span><span class="z-constant z-numeric"> 5432</span></span></code></pre><h2 id="disable-ufw"><a class="zola-anchor" href="#disable-ufw" aria-label="Anchor link for: disable-ufw">🔗</a>Disable ufw</h2> <pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw disable</span></span></code></pre><h2 id="block-an-ip-address-or-subnet"><a class="zola-anchor" href="#block-an-ip-address-or-subnet" aria-label="Anchor link for: block-an-ip-address-or-subnet">🔗</a>Block an ip address or subnet</h2> <pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw deny from</span><span class="z-constant z-numeric"> 203.0.113.100</span></span></code></pre><h2 id="delete-a-rule"><a class="zola-anchor" href="#delete-a-rule" aria-label="Anchor link for: delete-a-rule">🔗</a>Delete a rule</h2> <pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw delete allow from</span><span class="z-constant z-numeric"> 203.0.113.101</span></span></code></pre><h2 id="allow-incoming-connection-to-a-network-interface"><a class="zola-anchor" href="#allow-incoming-connection-to-a-network-interface" aria-label="Anchor link for: allow-incoming-connection-to-a-network-interface">🔗</a>Allow incoming connection to a network interface</h2> <pre class="giallo z-code"><code data-lang="shellscript"><span class="giallo-l"><span class="z-entity z-name">sudo</span><span class="z-string"> ufw allow in on eth0 from</span><span class="z-constant z-numeric"> 203.0.113.102</span></span></code></pre>