Changes between Version 17 and Version 18 of Csle2022/Agenda/FW

Timestamp:

Nov 24, 2022, 10:05:49 AM (2 years ago)

Author:

geethike

Comment:

--

Csle2022/Agenda/FW

@@ -274 +274 @@
 sudo ufw delete allow from 203.0.113.101
 }}}
+Another way to specify which rule you want to delete is by providing the rule ID. This information can be obtained with the following command:
+{{{
+sudo ufw status numbered
+}}}
+
+{{{
+Output
+Status: active
+
+     To                         Action      From
+     --                         ------      ----
+[ 1] Anywhere                   DENY IN     203.0.113.100             
+[ 2] Anywhere on eth0           ALLOW IN    203.0.113.102        
+}}}
+
+From the output, you can see that there are two active rules. The first rule, with highlighted values, denies all connections coming from the IP address 203.0.113.100. The second rule allows connections on the eth0 interface coming in from the IP address 203.0.113.102.
+
+Because by default UFW already blocks all external access unless explicitly allowed, the first rule is redundant, so you can remove it. To delete a rule by its ID, run:
+{{{
+sudo ufw delete 1
+}}}
+You will be prompted to confirm the operation and to make sure the ID you’re providing refers to the correct rule you want to delete.
+{{{
+Output
+Deleting:
+ deny from 203.0.113.100
+Proceed with operation (y|n)? y
+Rule deleted
+}}}
+
+'''List Available Application Profiles'''
+
+Upon installation, applications that rely on network communications will typically set up a UFW profile that you can use to allow connection from external addresses. This is often the same as running '''''ufw allow from''''', with the advantage of providing a shortcut that abstracts the specific port numbers a service uses and provides a user-friendly nomenclature to referenced services.
+
+To list which profiles are currently available, run the following;
+{{{
+sudo ufw app list
+}}}
+
+'''Enable Application Profile'''