Power up with new SaaS Add-Ons from the DigitalOcean Marketplace

Question

Enabling firewall without locking ourselves out

  • Posted August 15, 2014

Hello, I am a new user of digital ocean. I have a droplet that is up but I have not turned on the firewall yet. I would like some advice on the correct process to turn on the firewall without closing access to ssh (which I only presume could happen).

My questions:

  1. Does console access work regarless of firewall settings?
  2. On Ubuntu 12.04, by default, will “ufw enable” close access to ssh (port 22)?
  3. If so, will console still work for us to configure ufw properly?

Thanks in advance, Mario G.

Subscribe
Share
Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Kamal Nasser • August 15, 2014
  1. Does console access work regarless of firewall settings?

Yes. The remote console accesses your droplet through the hypervisor, so your firewall settings will not affect it.

  1. On Ubuntu 12.04, by default, will “ufw enable” close access to ssh (port 22)?

It depends on ufw’s default policy (allow/deny). I would recommend temporarily adding a rule that allows all connections from your IP, and once you’re sure your firewall settings are correct, you can remove it:

sudo ufw allow from your-ip-address