Report this

What is the reason for this report?

Enabling firewall without locking ourselves out

Posted on August 15, 2014

Hello, I am a new user of digital ocean. I have a droplet that is up but I have not turned on the firewall yet. I would like some advice on the correct process to turn on the firewall without closing access to ssh (which I only presume could happen).

My questions:

  1. Does console access work regarless of firewall settings?
  2. On Ubuntu 12.04, by default, will “ufw enable” close access to ssh (port 22)?
  3. If so, will console still work for us to configure ufw properly?

Thanks in advance, Mario G.



This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
  1. Does console access work regarless of firewall settings?

Yes. The remote console accesses your droplet through the hypervisor, so your firewall settings will not affect it.

  1. On Ubuntu 12.04, by default, will “ufw enable” close access to ssh (port 22)?

It depends on ufw’s default policy (allow/deny). I would recommend temporarily adding a rule that allows all connections from your IP, and once you’re sure your firewall settings are correct, you can remove it:

sudo ufw allow from your-ip-address

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Get started for free

Sign up and get $200 in credit for your first 60 days with DigitalOcean.*

*This promotional offer applies to new accounts only.