配置ufw

1

sudo ufw status

1

sudo ufw enable

1
2
3
4

# 允许IP
sudo ufw allow from 203.0.113.101
# 阻止IP
sudo ufw deny from 203.0.113.100

1
2
3
4
5
6
7
8

# 允许外部访问端口8080
sudo ufw allow 8080
# 允许某ip访问端口8080
sudo ufw allow from 203.0.113.101 to any port 8080
# 阻止外部访问端口8080
sudo ufw disable 8080
# 阻止某ip访问端口8080
sudo ufw deny from 203.0.113.101 to any port 8080

1
2
3
4

# 允许
sudo ufw allow OpenSSH
# 阻止
sudo ufw disable OpenSSH

1

sudo ufw app list | grep Nginx

1
2
3
4

#Output
  Nginx Full
  Nginx HTTP
  Nginx HTTPS

1
2
3
4

#允许
sudo ufw allow "Nginx Full"
#阻止
sudo ufw deny "Nginx Full"

1

sudo ufw status

1

sudo ufw delete 2

1
2

sudo ufw allow from 203.0.113.101 to any port 8080
sudo ufw delete allow from 203.0.113.101 to any port 8080