☰

UFW 阻止以太网连接？

tag-icon • tag-icon networking iptables firewall ufw
UFW 阻止以太网连接？

我已经将连接问题隔离到 UFW。当我启用 UFW 时，网络连接断开，我无法通过它访问互联网。ping 8.8.8.8开始返回不允许的操作。

我该如何修改规则以启用典型的网络流量？

这是我的 IP 配置：

sarah@LesserArk:/media/Wandering_Echo/Snapshots$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether a0:1d:48:fa:67:c0 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.133/24 brd 192.168.1.255 scope global dynamic noprefixroute eno1
       valid_lft 85910sec preferred_lft 85910sec
    inet6 fe80::fc1e:6d15:705e:daae/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
3: wlp7s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether e4:70:b8:f8:99:b8 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.212/24 brd 192.168.1.255 scope global dynamic noprefixroute wlp7s0
       valid_lft 85919sec preferred_lft 85919sec
    inet6 fe80::1d67:e220:8994:a44e/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

编辑0： 当前 UFW 状态（我现在如何发布）：

sarah@LesserArk:/media/Wandering_Echo/Snapshots$ sudo ufw status
Status: inactive

激活后： sarah@LesserArk:/media/Wandering_Echo/Snapshots$ sudo ufw status 状态：活跃

    To                         Action      From
    --                         ------      ----
    45834                      ALLOW       Anywhere                  
    1714:1764/udp              ALLOW       Anywhere                  
    1714:1764/tcp              ALLOW       Anywhere                  
    80/tcp on eno1             ALLOW       Anywhere                  
    80/tcp                     ALLOW       Anywhere                  
    80 on eno1                 ALLOW       Anywhere                  
    45834 (v6)                 ALLOW       Anywhere (v6)             
    1714:1764/udp (v6)         ALLOW       Anywhere (v6)             
    1714:1764/tcp (v6)         ALLOW       Anywhere (v6)             
    80/tcp (v6) on eno1        ALLOW       Anywhere (v6)             
    80/tcp (v6)                ALLOW       Anywhere (v6)             
    80 (v6) on eno1            ALLOW       Anywhere (v6)             

    45834                      ALLOW OUT   Anywhere                  
    45834 (v6)                 ALLOW OUT   Anywhere (v6)

相关内容