UFW命令

apt-get install ufw -y

#  启动服务
ufw enable
#  查看状态
ufw status
#  关闭服务
ufw disable
#  重启服务
ufw reset

#  允许所有传出流量
ufw default allow outgoing
#  阻止所有传入流量
ufw default deny incoming

ufw allow ssh
ufw allow http
ufw allow https

ufw allow 22
ufw allow 80/tcp
ufw allow 21/udp
#  按范围指定端口
ufw allow 9000:9002/tcp
ufw allow 9000:9002/udp

ufw allow from 192.168.1.1
ufw allow from 192.168.1.1/24

ufw deny 80
ufw deny 21

ufw deny from 192.168.1.1
ufw deny from 192.168.1.1/24

ufw delete allow http
ufw delete deny 21
#  按编号删除
ufw delete 2

#  允许特定ip到特定端口
ufw allow from 192.168.1.1 to any port 80
#  指定协议
ufw allow from 192.168.1.1 to any port 80 proto tcp

#  查看所有策略
ufw status verbose
#  查看所有策略和编号
ufw status numbered