{"id":610,"date":"2025-08-20T14:16:29","date_gmt":"2025-08-20T05:16:29","guid":{"rendered":"http:\/\/www.iwgh.my\/?p=610"},"modified":"2025-08-20T15:30:32","modified_gmt":"2025-08-20T06:30:32","slug":"ubuntu-ufw-%ec%82%ac%ec%9a%a9%ed%95%98%ec%97%ac-iptables-%eb%b0%a9%ed%99%94%eb%b2%bd-%ec%a0%95%ec%b1%85-%eb%b3%80%ea%b2%bd","status":"publish","type":"post","link":"https:\/\/iwgh.duckdns.org\/?p=610","title":{"rendered":"Ubuntu UFW \uc0ac\uc6a9\ud558\uc5ec iptables \ubc29\ud654\ubcbd \uc815\ucc45 \ubcc0\uacbd"},"content":{"rendered":"\n

UFW\uc640 iptables\uc758 \uad00\uacc4<\/strong><\/p>\n\n\n\n

iptables : \ub9ac\ub205\uc2a4 \ucee4\ub110 \uc218\uc900\uc758 \ubc29\ud654\ubcbd \uc2dc\uc2a4\ud15c. \ubaa8\ub4e0 \ub124\ud2b8\uc6cc\ud06c \ud2b8\ub798\ud53d \uc81c\uc5b4\uc758 \ud575\uc2ec.
ufw : iptables\ub97c \uc27d\uac8c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub3c4\ub85d \ub9cc\ub4e0 \ud504\ub860\ud2b8\uc5d4\ub4dc \ub3c4\uad6c. \uc0ac\uc6a9\uc790 \uce5c\ud654\uc801 \uc778\ud130\ud398\uc774\uc2a4 \uc81c\uacf5.
\uc989, UFW\ub294 iptables\ub97c \ub0b4\ubd80\uc801\uc73c\ub85c \uc0ac\uc6a9\ud574\uc11c \ubc29\ud654\ubcbd \uaddc\uce59\uc744 \uc124\uc815\ud569\ub2c8\ub2e4. \uc0ac\uc6a9\uc790\uac00 ufw allow 22 \uac19\uc740 \uba85\ub839\uc744 \uc785\ub825\ud558\uba74, \uc2e4\uc81c\ub85c\ub294 iptables\uc5d0 \ud574\ub2f9\ud558\ub294 \uaddc\uce59\uc774 \uc0dd\uc131\ub418\ub294 \uac83\uc774\uc8e0.<\/p>\n\n\n\n

<\/p>\n\n\n\n

default \uac12<\/strong><\/p>\n\n\n\n

# iptables -L | grep -e INPUT
Chain INPUT (policy ACCEPT)
# iptables -L | grep -e FORWARD
Chain FORWARD (policy ACCEPT)
# iptables -L | grep -e OUTPUT
Chain OUTPUT (policy ACCEPT)<\/p>\n\n\n\n

<\/p>\n\n\n\n

UFW\ub294 \ucd5c\uc18c\uc124\uce58\uc2dc default \ub85c disable \ub418\uc5b4 \uc788\uc74c.<\/strong>
\ubc29\ud654\ubcd1 \uc815\ucc45\ub3c4 \uc804\uccb4 ACCEPT\ub85c \ub418\uc5b4 \uc788\uc74c.<\/strong>
\ud655\uc778 \ud6c4 enable \ud544\uc694.<\/strong><\/p>\n\n\n\n

# ufw status
# systemctl status ufw.service
# systemctl enable ufw.service
# systemctl start ufw.service
# systemctl status ufw.service
# ufw enable
\u00a0Command may disrupt existing ssh connections. Proceed with operation (y|n)? y
\u00a0Firewall is active and enabled on system startup<\/p>\n\n\n\n

<\/p>\n\n\n\n

\uc0c1\ud0dc\ud655\uc778<\/strong> <\/strong>\ubc0f<\/strong> <\/strong>\uc815\ucc45\ucd94\uac00<\/strong><\/p>\n\n\n\n

# ufw status numbered
# ufw allow from 172.30.0.205\/20 to any port 22 proto tcp
# ufw allow from 10.10.10.0\/24 to any port 22 proto tcp
# ufw allow from 192.168.240.48\/21 to any port 22 proto tcp
# ufw allow from 172.30.0.205\/20 to any port 5000 proto tcp
# ufw allow from 172.30.0.205\/20 to any port 10150:10250 proto tcp
;; \uc678\ubd80\uc5d0\uc11c \uc11c\ubc84\ub85c \ub4e4\uc5b4\uc624\ub294 input \uc815\ucc45\uc758 \uacbd\uc6b0 \uc678\ubd80 \uc18c\uc2a4 IP \ub610\ub294 \ub300\uc5ed\uc744 \uc9c0\uc815\ud558\uace0 \ubaa9\uc801\uc9c0\ub294 any\ub85c \ub450\ub294 \uacbd\uc6b0\uac00 \ub9ce\uc74c.
\u00a0 \uc5ec\ub7ec\uac1c\uc758 IP\uc5d0 \ub300\ud574 \ubcc4\ub3c4\ub85c \uc815\ucc45\uc744 \uc138\uc6b8\ub824\uba74 \uc774 \ubd80\ubd84\ub3c4 any \ub300\uc2e0 IP\/\ub300\uc5ed\uc744 \uc9c0\uc815.
\u00a0 proto tcp\ub85c \ud504\ub85c\ud1a0\ucf5c tcp\ub97c \uc9c0\uc815\ud558\uc9c0 \uc54a\uc73c\uba74 tcp\/udp \ub3d9\uc2dc\uc5d0 \uc801\uc6a9\ub428.

# ufw status numbered
# ufw default deny incoming
;; \uae30\ubcf8 INPUT \uc815\uccb5 DROP\ub85c \uc124\uc815.
# ufw show raw or # iptables -L
<\/p>\n\n\n\n

** \uc815\ucc45\ucd94\uac00\uc2dc \uae30\ubcf8\uc801\uc73c\ub85c INPUT \uc815\ucc45\uc740 DROP\ub85c \ubcc0\uacbd\ub418\ub294 \uac83\uc73c\ub85c \ubcf4\uc784.<\/strong><\/p>\n\n\n\n

# iptables -L | grep -e INPUT
Chain INPUT (policy DROP)
# iptables -L | grep -e FORWARD
Chain FORWARD (policy DROP)
# iptables -L | grep -e OUTPUT
Chain OUTPUT (policy ACCEPT)
<\/p>\n\n\n\n

\uc815\ucc45\uc218\uc815<\/strong> <\/strong>\uba85\ub839\uc5b4\ub294<\/strong> <\/strong>\uc9c0\uc6d0\ud558\uc9c0<\/strong> <\/strong>\uc54a\uc74c<\/strong>. <\/strong>\uc0c8\ub85c\uc6b4<\/strong> <\/strong>\uc815\ucc45\uc744<\/strong> <\/strong>\ucd94\uac00\ud558\uace0<\/strong> <\/strong>\uae30\uc874<\/strong> <\/strong>\uc815\ucc45\uc744<\/strong> <\/strong>\uc0ad\uc81c<\/strong><\/p>\n\n\n\n

# ufw status numbered
Status: active
\u00a0\u00a0\u00a0\u00a0 To\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Action\u00a0\u00a0\u00a0\u00a0\u00a0 From
\u00a0\u00a0\u00a0\u00a0 —\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ——\u00a0\u00a0\u00a0\u00a0\u00a0 —-
[ 1] 22\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 172.30.0.0\/20<\/strong>
[ 2] 22\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 10.10.10.0\/24
[ 3] 22\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 192.168.240.0\/21
[ 4] 5000\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 172.30.0.0\/20
[ 5] 5000\/tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 172.30.0.0\/20
[ 6] 22\/tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 172.30.0.0\/20
[ 7] 22\/tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 10.10.10.0\/24
[ 8] 22\/tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 192.168.240.0\/21
<\/p>\n\n\n\n

# ufw delete 1
:Deleting
\u00a0allow from 172.30.0.0\/20 to any port 22
Proceed with operation (y|n)? y
Rule deleted
# ufw status numbered
Status: active
Status: active
\u00a0\u00a0\u00a0\u00a0 To\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Action\u00a0\u00a0\u00a0\u00a0\u00a0 From
\u00a0\u00a0\u00a0\u00a0 —\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ——\u00a0\u00a0\u00a0\u00a0\u00a0 —-
[ 1] 22\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 10.10.10.0\/24<\/strong>
[ 2] 22\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 192.168.240.0\/21
[ 3] 5000\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 172.30.0.0\/20
[ 4] 5000\/tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 172.30.0.0\/20
[ 5] 22\/tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 172.30.0.0\/20
[ 6] 22\/tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 10.10.10.0\/24
[ 7] 22\/tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALLOW IN\u00a0\u00a0\u00a0 192.168.240.0\/21
<\/p>\n\n\n\n

**\uc0c1\ub2e8 \uc815\ucc45\uc774 \uc9c0\uc6cc\uc9c0\uba74 \uc790\ub3d9\uc73c\ub85c NO\uac00 \ud55c\uc790\ub9ac\uc529 \uc62c\ub824\uc9d0.
\u00a0 \uc0ad\uc81c\uc2dc\ub9c8\ub2e4 NO \ud655\uc778 \ud544\uc694.
**\uc21c\uc11c\ubcc0\uacbd \uba85\ub839\uc5b4 \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uc74c.
\u00a0 \ud544\uc694\uc2dc \/etc\/ufw\/user.rules \ub97c \uc9c1\uc811\uc218\uc815 \ud6c4, reload \ud544\uc694.(ufw reload)<\/p>\n","protected":false},"excerpt":{"rendered":"

UFW\uc640 iptables\uc758 \uad00\uacc4 iptables : \ub9ac\ub205\uc2a4 \ucee4\ub110 \uc218\uc900\uc758 \ubc29\ud654\ubcbd \uc2dc\uc2a4\ud15c. \ubaa8\ub4e0 \ub124\ud2b8\uc6cc\ud06c \ud2b8\ub798\ud53d \uc81c\uc5b4\uc758 \ud575\uc2ec.ufw : iptables\ub97c \uc27d\uac8c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub3c4\ub85d \ub9cc\ub4e0 \ud504\ub860\ud2b8\uc5d4\ub4dc \ub3c4\uad6c. \uc0ac\uc6a9\uc790 […]<\/p>\n","protected":false},"author":1,"featured_media":439,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[206,117,204,205,11,12,203],"class_list":["post-610","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech","tag-24-04","tag-config","tag-firewall","tag-iptables","tag-linux","tag-ubuntu","tag-ufw"],"_links":{"self":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=610"}],"version-history":[{"count":1,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/610\/revisions"}],"predecessor-version":[{"id":611,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/610\/revisions\/611"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/media\/439"}],"wp:attachment":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}