Question

Enabling firewall without locking ourselves out

Posted August 15, 2014 1.8k views

Hello,
I am a new user of digital ocean. I have a droplet that is up but I have not turned on the firewall yet. I would like some advice on the correct process to turn on the firewall without closing access to ssh (which I only presume could happen).

My questions:
1) Does console access work regarless of firewall settings?
2) On Ubuntu 12.04, by default, will “ufw enable” close access to ssh (port 22)?
3) If so, will console still work for us to configure ufw properly?

Thanks in advance,
Mario G.

Add a comment
mario.guzzi
By:
mario.guzzi
Add a comment

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

1 answer
kamaln7 August 15, 2014

1) Does console access work regarless of firewall settings?

Yes. The remote console accesses your droplet through the hypervisor, so your firewall settings will not affect it.

2) On Ubuntu 12.04, by default, will “ufw enable” close access to ssh (port 22)?

It depends on ufw’s default policy (allow/deny). I would recommend temporarily adding a rule that allows all connections from your IP, and once you’re sure your firewall settings are correct, you can remove it:

sudo ufw allow from your-ip-address
Reply Report
Submit an Answer

Looking for something else?

Ask a new question Search for more help