Firewall setup problem - newbie here, reading guides and learning.
 

Hello,

I was able to connect to my ubuntu server through ssh on port 369 no problem.

As soon as I begun setting up firewall with ufw command, can't connect to server again.

Here's my configuration :

<pre>sudo ufw status numbered
Status: active

To Action From
-- ------ ----
[ 1] 6000/tcp ALLOW IN Anywhere
[ 2] 123/udp ALLOW IN Anywhere
[ 3] 369/tcp ALLOW IN Anywhere
[ 4] 6000/tcp (v6) ALLOW IN Anywhere (v6)
[ 5] 123/udp (v6) ALLOW IN Anywhere (v6)
[ 6] 369/tcp (v6) ALLOW IN Anywhere (v6) </pre>


in the sshd_config

there's line
Port 369


And as soon as I disable firewall, I can log in BUT no longer on port 369 but on port 22?! ...

What is happening?!

Try checking what is really in your sshd configuration to see which port it is configured to use:

The -T option does an extended configuration test and reports what the SSH server is actually deploying. See "man sshd"

Then you can double check with netstat and review the output to verify what sshd is actually listening. See "man netstat"

It should be the same as what you have in the configuration file. If not, you may have to have the SSH server reload its configuration.

Then if there is a mismatch between what the SSH server is using and what UFW is told to let in, one of those will have to be adjusted.

Looks like you're messing up to me. I'm not sure what you intended to do.

That's pretty nice of you to leave X-windows port TCP 6000 open like that. I'm sure somebody will make use of it.

Not to mention NTP. I'm pretty sure it uses TCP and UDP ports 123.


I've got a Kali box and use ufw on it, but it's busy ATM.

All you show is a little piece of not much of anything so I don't know what rules you're using.
However, these two rules at the top are supposed to go in there, the rest is how you make rules for ufw.
On Linux, just so you know I know you're using Linux:
Here's the pf ruleset I use on my FreeBSD boxen:
That will work an an OpenBSD box with a change in syntax of one word in the egress rule, out to egress (of course).


Here's what it looks like when it's at work on the FreeBSD box I'm using now: