DE

↑ ↓ select, Enter open, Esc close

Allow a port only from a specific IP with ufw

caution rootFirewalldebian, ubuntu

Caution: This command changes the system. Understand what it does before you run it.

Adjust the values, the command updates live
root@server
ufw allow from 198.51.100.0/24 to any port 22 proto tcp

Allows incoming TCP connections on the port only from the given address or subnet in CIDR notation. Other sources fall back to the default policy. Typical for admin access such as SSH, database ports or the Plesk panel on port 8443.

Note: An existing general rule for the same port (ufw allow 22/tcp) must be removed afterwards, otherwise the port stays open for everyone.

Also searched as

  • ufw allow ssh from specific ip
  • restrict port to ip address ufw
  • ufw allow from subnet to port

Related one-liners

All in Firewall

Enable ufw without locking yourself out

#ufw allow 22/tcp && ufw enable
destructiveFirewall

Block an IP address or subnet with ufw

#ufw insert 1 deny from 203.0.113.0/24
cautionFirewall

Close a port in ufw by deleting its rule

#ufw delete allow 8080/tcp
cautionFirewall

Count IP addresses blocked by ufw

#journalctl -k --since "today" --no-pager | grep 'UFW BLOCK' | grep -o 'SRC=[^ ]*' | sort | uniq -c | sort -rn | head -20
harmlessFirewall

Delete a ufw rule by number

#ufw delete 3
cautionFirewall

Enable ufw logging

#ufw logging low
cautionFirewall

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.