By Wayne Knight
ufw is set to allow full access to nginx web server, but blocks https
dmesg error report: [Fri Jun 28 02:56:17 2019] [UFW BLOCK] IN=enp4s0 OUT= MAC=01:00:5e:00:00:01:20:c0:47:13:01:15:08:00 SRC=192.168.1.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=33361 DF PROTO=2
http requests are passed successfully
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
When it comes to ufw, I often recommend a full reset to ensure the firewall is properly configured to meet the specific needs of what I’m using the server for. In some cases, it’s often best to specify the ports versus using the shortcodes.
I posted a quick guide on how to reset ufw, which may be helpful for future use.
https://www.digitalocean.com/community/questions/how-to-reset-the-firewall-on-ubuntu
Found two problems. In setting up my certificate I had started a new serverblock for my website but not completed it. I was working with the default serverblock to work out the firewall problems. Both server blocks (which now had my domain name in them) were in the sites-enabled folder and that screwed up the firewall.
The second problem was the snakeoil snippet pointing which pointed to a certificate that was truly snakeoil. Deleting that snippet and pointing to the correct certificate and key fixed the problem.
Hello,
Can you try explicitly allowing Nginx HTTPS as well with this command:
ufw allow 'Nginx HTTP'
Then after that run this command to verify your change:
ufw status
Hope that this helps! Bobby
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
Full documentation for every DigitalOcean product.
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
Stay up to date by signing up for DigitalOcean’s Infrastructure as a Newsletter.
New accounts only. By submitting your email you agree to our Privacy Policy
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.