{"id":1365,"date":"2026-09-03T11:37:19","date_gmt":"2026-09-03T06:07:19","guid":{"rendered":"https:\/\/cpanelfree.com\/blog\/how-to-configure-ufw-firewall-ubuntu\/"},"modified":"2026-09-12T12:45:21","modified_gmt":"2026-09-12T07:15:21","slug":"how-to-configure-ufw-firewall-ubuntu","status":"publish","type":"post","link":"https:\/\/cpanelfree.com\/blog\/how-to-configure-ufw-firewall-ubuntu\/","title":{"rendered":"How to Configure UFW Firewall on Ubuntu Server (Rules, Ports & Best Practices)"},"content":{"rendered":"
\n

\n Quick Answer:<\/strong> To secure an Ubuntu VPS using UFW (Uncomplicated Firewall), set the default policy to deny incoming traffic (sudo ufw default deny incoming<\/code>), allow your SSH port (sudo ufw allow 22\/tcp<\/code> or sudo ufw limit ssh<\/code>), allow HTTP\/HTTPS (sudo ufw allow 'Nginx Full'<\/code>), and enable the firewall with sudo ufw enable<\/code>.\n <\/p>\n

\n \u23f1\ufe0f 5 min read (932 words)<\/span>
\n \ud83d\udee1\ufe0f Verified on Ubuntu 24.04 \/ Debian 12<\/span>
\n \ud83d\udd04 Updated for 2026 Edition<\/span>\n<\/div>\n

<\/p>\n

\n
\n
\n \ud83d\udcd1<\/span> Table of Contents\n <\/div>\n

Guide Index<\/span>\n <\/div>\n

\n 1<\/span>What is UFW and Why Every Linux VPS Needs It<\/span>›<\/span><\/a>2<\/span>Step 1: Setting Default Firewall Policies<\/span>›<\/span><\/a>3<\/span>Step 2: Allowing SSH Access (Prevent Lockout!)<\/span>›<\/span><\/a>4<\/span>Step 3: Opening Web Server & Control Panel Ports<\/span>›<\/span><\/a>5<\/span>Step 4: Enabling and Verifying UFW Status<\/span>›<\/span><\/a>6<\/span>Advanced UFW Management: IP Whitelisting & Rule Deletion<\/span>›<\/span><\/a>7<\/span>Advanced UFW Port Forwarding & NAT Routing Rules<\/span>›<\/span><\/a>8<\/span>Analyzing UFW Log Files for Port Scans and Intrusion Attempts<\/span>›<\/span><\/a>9<\/span>Comprehensive UFW Command Reference Cheat Sheet<\/span>›<\/span><\/a>10<\/span>Protecting Internal Databases and Docker Services from Exposure<\/span>›<\/span><\/a>11<\/span>Frequently Asked Questions<\/span>›<\/span><\/a>\n <\/div>\n<\/div>\n<\/div>\n

What is UFW and Why Every Linux VPS Needs It<\/h2>\n

UFW (Uncomplicated Firewall)<\/strong> is the default frontend for managing netfilter\/iptables firewall rules in Ubuntu and Debian systems. By default, fresh Linux servers expose all bound service ports to the public internet, leaving internal services (like Redis on port 6379, MySQL on port 3306, and debug listeners) vulnerable to port scans and automated exploits.<\/p>\n

<\/p>\n

\n
\n
\n \u26a1 Executive Summary & Key Takeaways
\n <\/span>
\n Verified Guide<\/span>\n <\/div>\n