{"id":126,"date":"2025-10-08T05:09:06","date_gmt":"2025-10-08T05:09:06","guid":{"rendered":"https:\/\/blog.tudcloud.com\/?p=126"},"modified":"2025-10-08T05:12:24","modified_gmt":"2025-10-08T05:12:24","slug":"setting-up-a-firewall-on-ubuntu-ufw-guide","status":"publish","type":"post","link":"https:\/\/blog.tudcloud.com\/zh\/setting-up-a-firewall-on-ubuntu-ufw-guide\/","title":{"rendered":"\u5728 Ubuntu \u4e0a\u8bbe\u7f6e\u9632\u706b\u5899\uff08UFW \u6307\u5357\uff09"},"content":{"rendered":"<p><\/p>\n\n\n\n<p>\u9632\u706b\u5899\u662f VPS \u6700\u91cd\u8981\u7684\u4fdd\u62a4\u5c42\u4e4b\u4e00\u3002<br>\u5b83\u53ef\u4ee5\u5e2e\u52a9\u60a8\u63a7\u5236\u54ea\u4e9b\u7f51\u7edc\u6d41\u91cf\u53ef\u4ee5\u8fdb\u5165\u6216\u79bb\u5f00\u60a8\u7684\u670d\u52a1\u5668\u2014\u2014\u964d\u4f4e\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u548c\u653b\u51fb\u7684\u98ce\u9669\u3002<\/p>\n\n\n\n<p>\u5728\u672c\u6307\u5357\u4e2d\uff0c\u60a8\u5c06\u5b66\u4e60\u5982\u4f55\u4f7f\u7528 <strong>UFW\uff08\u7b80\u5355\u9632\u706b\u5899\uff09<\/strong>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd30 1.\u4ec0\u4e48\u662f UFW\uff1f<\/h2>\n\n\n\n<p>UFW \u662f\u4e00\u6b3e\u7528\u6237\u53cb\u597d\u7684\u9632\u706b\u5899\u7ba1\u7406\u5de5\u5177\uff0c\u5efa\u7acb\u5728 <strong>iptables<\/strong>\uff0c\u65e8\u5728\u7b80\u5316Linux\u9632\u706b\u5899\u914d\u7f6e\u3002<br>\u5b83\u5728\u5927\u591a\u6570\u73b0\u4ee3 Ubuntu \u7cfb\u7edf\u4e0a\u9ed8\u8ba4\u53ef\u7528\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u2699\ufe0f 2. \u68c0\u67e5 UFW \u72b6\u6001<\/h2>\n\n\n\n<p>\u8981\u9a8c\u8bc1 UFW \u662f\u5426\u5df2\u5b89\u88c5\u5e76\u5904\u4e8e\u6d3b\u52a8\u72b6\u6001\uff0c\u8bf7\u8fd0\u884c\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\" data-no-translation=\"\"><code data-no-translation=\"\">sudo ufw status\n<\/code><\/pre>\n\n\n\n<p>\u5982\u679c\u4f60\u5f97\u5230 <code data-no-translation=\"\">Status: inactive<\/code>\uff0c\u914d\u7f6e\u5b8c\u6210\u540e\u5373\u53ef\u542f\u7528\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83e\udde9 3. \u9996\u5148\u5141\u8bb8 SSH \u8bbf\u95ee<\/h2>\n\n\n\n<p>\u5728\u542f\u7528\u9632\u706b\u5899\u4e4b\u524d\uff0c\u8bf7\u786e\u4fdd\u5141\u8bb8 SSH \u8bbf\u95ee - \u5426\u5219\u60a8\u5c06\u88ab\u9501\u5b9a\uff01<\/p>\n\n\n\n<pre class=\"wp-block-code\" data-no-translation=\"\"><code data-no-translation=\"\">sudo ufw allow 22\/tcp\n<\/code><\/pre>\n\n\n\n<p>\u5982\u679c\u60a8\u66f4\u6539\u4e86 SSH \u7aef\u53e3\uff0c\u8bf7\u76f8\u5e94\u5730\u8fdb\u884c\u8c03\u6574\uff08\u4f8b\u5982\u7aef\u53e3 2222\uff09\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83c\udf10 4. \u5141\u8bb8 Web \u548c\u5176\u4ed6\u5e38\u7528\u670d\u52a1<\/h2>\n\n\n\n<p>\u5141\u8bb8 HTTP \u548c HTTPS \u8fdb\u884c\u7f51\u7edc\u6d41\u91cf\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\" data-no-translation=\"\"><code data-no-translation=\"\">sudo ufw allow 80\/tcp\nsudo ufw allow 443\/tcp\n<\/code><\/pre>\n\n\n\n<p>\u60a8\u8fd8\u53ef\u4ee5\u6839\u636e\u9700\u8981\u5141\u8bb8\u5176\u4ed6\u7aef\u53e3\uff0c\u4f8b\u5982\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\" data-no-translation=\"\"><code data-no-translation=\"\">sudo ufw allow 21\/tcp    # FTP  \nsudo ufw allow 25\/tcp    # SMTP (Mail)  \nsudo ufw allow 3306\/tcp  # MySQL (Database)\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\ude80 5. \u542f\u7528\u9632\u706b\u5899<\/h2>\n\n\n\n<p>\u8bbe\u7f6e\u89c4\u5219\u540e\uff0c\u542f\u7528 UFW\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\" data-no-translation=\"\"><code data-no-translation=\"\">sudo ufw enable\n<\/code><\/pre>\n\n\n\n<p>\u60a8\u4f1a\u770b\u5230\uff1a<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u8be5\u547d\u4ee4\u53ef\u80fd\u4f1a\u4e2d\u65ad\u73b0\u6709\u7684 SSH \u8fde\u63a5\u3002\u662f\u5426\u7ee7\u7eed\u64cd\u4f5c (y|n)\uff1f<br>\u7c7b\u578b <code data-no-translation=\"\">y<\/code> \u7136\u540e\u6309 Enter \u952e\u3002<\/p>\n<\/blockquote>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd0d 6. \u7ba1\u7406\u548c\u5ba1\u67e5\u89c4\u5219<\/h2>\n\n\n\n<p>\u5217\u51fa\u6d3b\u52a8\u89c4\u5219\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\" data-no-translation=\"\"><code data-no-translation=\"\">sudo ufw status numbered\n<\/code><\/pre>\n\n\n\n<p>\u6839\u636e\u89c4\u5219\u7f16\u53f7\u5220\u9664\u89c4\u5219\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\" data-no-translation=\"\"><code data-no-translation=\"\">sudo ufw delete 3\n<\/code><\/pre>\n\n\n\n<p>\u7981\u7528\u9632\u706b\u5899\uff08\u4e0d\u63a8\u8350\uff09\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\" data-no-translation=\"\"><code data-no-translation=\"\">sudo ufw disable\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u2705 7. \u603b\u7ed3<\/h2>\n\n\n\n<p>\u73b0\u5728\u60a8\u6709\u4e00\u4e2a\u57fa\u672c\u7684\u9632\u706b\u5899\u6765\u4fdd\u62a4\u60a8\u7684 Ubuntu VPS\u3002<br><strong>Tudcloud VPS \u7528\u6237\u7684\u63a8\u8350\u8bbe\u7f6e\uff1a<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u4fdd\u6301 SSH\uff0822 \u6216\u60a8\u7684\u81ea\u5b9a\u4e49\u7aef\u53e3\uff09\u6253\u5f00<\/li>\n\n\n\n<li>\u5141\u8bb8 Web \u7aef\u53e3\uff0880\u3001443\uff09<\/li>\n\n\n\n<li>\u9ed8\u8ba4\u62d2\u7edd\u6240\u6709\u5176\u4ed6\u6d41\u91cf<\/li>\n\n\n\n<li>\u7ed3\u5408 <strong>Tudcloud DDoS \u9632\u62a4<\/strong> \u4e3a\u4e86\u6700\u5927\u7a0b\u5ea6\u7684\u5b89\u5168<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83e\udde9 \u7ed3\u8bba<\/h2>\n\n\n\n<p>\u6b63\u786e\u914d\u7f6e\u7684\u9632\u706b\u5899\u662f\u60a8\u7684\u7b2c\u4e00\u9053\u9632\u7ebf\u3002<br>\u4e00\u65e6 UFW \u542f\u52a8\uff0c\u60a8\u7684 VPS \u5c31\u4f1a\u53d8\u5f97\u66f4\u52a0\u5b89\u5168\uff0c\u53ef\u4ee5\u62b5\u5fa1\u653b\u51fb\u3002<\/p>","protected":false},"excerpt":{"rendered":"<p>A firewall is one of the most essential layers of protection for your VPS.It helps you control which network traffic is allowed in or out of your server \u2014 reducing the risk of unauthorized access and attacks. In this guide, you\u2019ll learn how to set up and manage a firewall on Ubuntu using UFW (Uncomplicated [&hellip;]<\/p>","protected":false},"author":1,"featured_media":131,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[43],"tags":[33,26,44,45,39],"class_list":["post-126","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server-security","tag-linux-vps","tag-tudcloud","tag-ubuntu-firewall","tag-ufw","tag-vps-security"],"blocksy_meta":[],"_links":{"self":[{"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/posts\/126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/comments?post=126"}],"version-history":[{"count":3,"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/posts\/126\/revisions"}],"predecessor-version":[{"id":133,"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/posts\/126\/revisions\/133"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/media\/131"}],"wp:attachment":[{"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/media?parent=126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/categories?post=126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.tudcloud.com\/zh\/wp-json\/wp\/v2\/tags?post=126"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}