How to block a specific IP Address using UFW

最新推荐文章于 2024-09-08 20:45:08 发布

转载最新推荐文章于 2024-09-08 20:45:08 发布 · 92 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/jins-note/p/9513302.html

本文介绍如何通过UFW防火墙设置来阻止特定IP地址的访问。关键在于确保阻止规则优先于允许规则执行。文章提供了规则配置示例，并说明了如何插入及删除规则。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

How to block a specific IP Address using UFW

The key to blocking a specific IP address with UFW is to make sure that the rule which blocks the ipaddress is applied before any allow rules. Because the firewalls rules are run in order – the block will no come into affect if it appears at the bottom. For example on most webserver you might expect the rules to be:

     To                         Action      From

     --                         ------      ----

     22                         ALLOW       Anywhere

     80                         ALLOW       Anywhere

     443                        ALLOW       Anywhere

     22                         ALLOW       Anywhere (v6)

     80                         ALLOW       Anywhere (v6)

     443                        ALLOW       Anywhere (v6)

Therefore, to block an IP address the rules would need to setup like this:

     To                         Action      From

     --                         ------      ----

     Anywhere                   DENY        &lt;ip address &gt;

     22                         ALLOW       Anywhere

     80                         ALLOW       Anywhere

     443                        ALLOW       Anywhere

     22                         ALLOW       Anywhere (v6)

     80                         ALLOW       Anywhere (v6)

     443                        ALLOW       Anywhere (v6)

To do this you need to insert the new deny rule at the top using the “insert” option.

sudo ufw insert 1 deny from <ip address>

To remove the block simple:

sudo ufw delete allow from <ip address>

For more information read the community documentation for UFW on Ubuntu.

来源： <http://www.randomhacks.co.uk/how-to-block-a-specific-ip-address-using-ufw/>

来自为知笔记(Wiz)

转载于:https://www.cnblogs.com/jins-note/p/9513302.html