By psmod2
Hi,
I have 2 droplets, one containing my DB and one my app.
The DB droplet i have UFW installed allowing only the IP of the droplet of my app however when I ping the IP from my laptop it returns data.
Is this supposed to be - I would have expected it to not do that?
Only my app droplet should have access to that DB droplet - absolutely nothing else.
Thanks.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
You’ll need to edit /etc/ufw/before.rules and modify two lines – in both cases, we’re replacing ACCEPT with DROP.
#01
-A ufw-before-input -p icmp --icmp-type echo-request -j ACCEPT
to
-A ufw-before-input -p icmp --icmp-type echo-request -j DROP
#02
-A ufw-before-forward -p icmp --icmp-type echo-request -j ACCEPT
to
-A ufw-before-forward -p icmp --icmp-type echo-request -j DROP
… and then run sudo ufw disable && sudo ufw enable.
You can also edit /etc/sysctl.conf and drop in:
net.ipv4.icmp_echo_ignore_all=1
… then run sudo sysctl -p to load the changes.
Once these changes have been made, you should see something similar to:
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
Request timeout for icmp_seq 3
Thanks - so as a security precaution is something commonly followed? (I only randomly thought about it).
Also - is there anything else I should also implement in addition to my UFW? Setting up fail2ban later today as well?
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.