Login or Register to Ask a Question and Join Our Community


UNIX for Beginners Questions & Answers

[ufw] force all traffic through VPN

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Top Forums UNIX for Beginners Questions & Answers [ufw] force all traffic through VPN
# 1  
Old 03-17-2019
[ufw] force all traffic through VPN
I am trying to force all my tun0's traffic through VPN but some some reason, the ufw is not working the way I want to.

Below are the commands that I have executed.. I am able to connect to my SSH and NFS server but for some reason that I am unable to understand, I am unable to surf the net.
What am I missing?

Code:
sudo echo "y" ufw reset
sudo ufw logging off
sudo ufw default deny incoming
sudo ufw default deny outgoing

#Force all VPN traffic to tun0
sudo ufw allow out on tun0 from any to any

#SSH
sudo ufw allow out on enp6s0 to ssh_ip_server port XX proto tcp

#NFS
sudo ufw allow out on enp6s0 to nfs_server_ip port xxx
sudo ufw allow out on enp6s0 to nfs_server_ip port xxx
sudo ufw allow out on enp6s0 to nfs_server_ip port xxx

sudo ufw enable

Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Linux

Linux keeps freezing on UFW BLOCK

Hi everyone, I have had trouble getting several versions of Linux stable on my machine over the last few months. I do not think the issue is with the machine. Windows ran fine on it for a long time. The current issue is that whenever I lock the screen then come back after a long time I find... (2 Replies)
Discussion started by: mojoman
2 Replies

2. Solaris

Vpn

Hi. Yesterday I installed Solaris 11.3 and I tried to setup a VPN but I didn't find how to make it. I saw the "network manager" where I found the ethernet connection but I didn't find where to add a VPN connection. When I used Debian Linux there was NetworkManagerVPN that with a GUI I... (0 Replies)
Discussion started by: Jena
0 Replies

3. Ubuntu

ubuntu kernel: [ 729.529501] [UFW ALLOW] ,[UFW AUDIT]

Hi , In our ubuntu server 10.10 ,we are getting below logs .Every day i need to restart server ,other wise it will not accessible.Some times ,i need to restart two times. When i ping google.com ,it was very slow .some times host not reachable .After reboot ,it will ping as good. ... (0 Replies)
Discussion started by: srinivasa
0 Replies

4. UNIX for Dummies Questions & Answers

Ubuntu 9.10 FIrewall--is UFW allowing anything through by default?

Hi, I have enabled my UBUNTU 9.10 ufw. By default does it let anything through? I would think it allows all outbound originating requests through and allows for their return but it does not allow any inbound requests. Is this how it works? ---------- Post updated at 08:17 PM ----------... (1 Reply)
Discussion started by: mojoman
1 Replies

5. UNIX for Dummies Questions & Answers

UFW show args command

In ubuntu man page there is this command. What are values of ARGS I can use? (0 Replies)
Discussion started by: mojoman
0 Replies

6. HP-UX

how to force umount

sorry, wrong section, mod please close thread (0 Replies)
Discussion started by: robertngo
0 Replies

7. UNIX for Advanced & Expert Users

VPN and then

Hi, I want to work on a remote unix server, then on a windows XP station I have a Forticlient that makes a VPN to the network on which the server is situated. But then I do not know how to work with. In DOS box (cmd BOX) I issue: telnet myserver but It does not know IT. Any idea ? Many thanks. (2 Replies)
Discussion started by: big123456
2 Replies

8. IP Networking

Vpn

Hi, I have two unix networks connected via VPN via IPsec. I am using snapgear vpn devices at each location. The two devices can ping one another, as well as the unix network behind the respected devices. The unix machines can ping their local vpn devices. However, I am having issues pinging... (1 Reply)
Discussion started by: l8kerboi23
1 Replies

9. UNIX for Dummies Questions & Answers

help with vpn

We have an older model DG Aviion Unix system and we're trying to switch to VPN but we can't talk to the Unix box... can't ping or telnet to it, but we can talk to all our other systems (PC/NT servers). Is there a network/tcpip setting we're missing? Something we have to change/set, either on... (0 Replies)
Discussion started by: markb
0 Replies
Login or Register to Ask a Question

LEARN ABOUT OSF1

niff

niff(7) 						 Miscellaneous Information Manual						   niff(7)

NAME

       niff - Network Interface Failure Finder (NIFF) introductory information.

DESCRIPTION

       The  Network  Interface Failure Finder, NIFF, is a facility for detecting and reporting possible failures in network interface cards (NICs)
       or their connections. Detection is done by monitoring device counters and attempting to	generate  traffic  to  NICs  suspected	of  having
       failed.	Reporting is done using the Event Manager subsystem (EVM).  NIFF does not drive failover operations; that is the responsibility of
       the application that subscribes to NIFF's EVM events. Appropriate courses of action may include selecting  another  network  interface  for
       communication or if it is a clustered environment, migrating an application.  See nr(7) for further information.

       At  the	heart of NIFF is the traffic monitor thread. The traffic monitor thread tracks changes in the network device's counters, and notes
       if the received packet counter remains unchanged since the previous snapshot. As long as the counter continues  to  increase,  the  traffic
       monitor thread assumes the NIC is functioning. See nifftmt(7) for further information.

       The  traffic  monitor  thread can monitor any network interface.  The configuration utility, niffconfig, is used to activate and administer
       the traffic monitor thread. See nifftmt(7) and niffconfig(8) for further information.

       The Network Interface Failure Finder daemon, niffd, is a traffic generator for network interfaces that have been classified inactive by the
       kernel traffic monitor thread. The purpose of niffd is to get the interface packet counters to increment, signifying the interface is still
       alive and well. See niffd(8) for further information.

SEE ALSO
:
       nifftmt(7), nr(7), niffconfig(8), niffd(8) delim off

																	   niff(7)