Correctly setting up UFW on Ubuntu Server 10 LTS which has Nginx, FastCGI and MySQL?
Posted
by
littlejim84
on Server Fault
See other posts from Server Fault
or by littlejim84
Published on 2010-08-10T20:27:20Z
Indexed on
2011/01/04
23:55 UTC
Read the original article
Hit count: 299
Hello. I'm wanting to get my firewall on my new webserver to be as secure as it needs to be. After I did research for iptables, I came across UFW (Uncomplicated FireWall). This looks like a better way for me to setup a firewall on Ubuntu Server 10 LTS and seeing that it's part of the install, it seems to make sense.
My server will have Nginx, FastCGI and MySQL on it. I also want to be allow SSH access (obviously). So I'm curious to know exactly how I should set up UFW and is there anything else I need to take into consideration? After doing research, I found an article that explains it this way:
# turn on ufw
ufw enable
# log all activity (you'll be glad you have this later)
ufw logging on
# allow port 80 for tcp (web stuff)
ufw allow 80/tcp
# allow our ssh port
ufw allow 5555
# deny everything else
ufw default deny
# open the ssh config file and edit the port number from 22 to 5555, ctrl-x to exit
nano /etc/ssh/sshd_config
# restart ssh (don't forget to ssh with port 5555, not 22 from now on)
/etc/init.d/ssh reload
This all seems to make sense to me. But is it all correct? I want to back this up with any other opinions or advice to ensure I do this right on my server.
Many thanks!
© Server Fault or respective owner