[sagher]

Why not simply use the already available iptables? Anyway...

Can you run the command below and post the output:

Code: (Select All)

/usr/share/ufw/check-requirements

Also please post the output of the rules that are being loaded by ufw? So we can see what "line 2" is.

Also the error message you posted... was that it? Nothing more?

Can you run the enable command again and after that post the output of:

Code: (Select All)

journalctl -xe

Code: (Select All)

root@********:~# /usr/share/ufw/check-requirements
Has python: pass (binary: python2.7, version: 2.7.13, py2)
Has iptables: pass
Has ip6tables: pass

Has /proc/net/dev: pass
Has /proc/net/if_inet6: pass

This script will now attempt to create various rules using the iptables
and ip6tables commands. This may result in module autoloading (eg, for
IPv6).
Proceed with checks (Y/n)? y
== IPv4 ==
Creating 'ufw-check-requirements'... done
Inserting RETURN at top of 'ufw-check-requirements'... done
TCP: pass
UDP: pass
destination port: pass
source port: pass
ACCEPT: pass
DROP: pass
REJECT: pass
LOG: pass
hashlimit: pass
limit: pass
ctstate (NEW): pass
ctstate (RELATED): pass
ctstate (ESTABLISHED): pass
ctstate (INVALID): pass
ctstate (new, recent set): pass
ctstate (new, recent update): pass
ctstate (new, limit): pass
interface (input): pass
interface (output): pass
multiport: pass
comment: pass
addrtype (LOCAL): pass
addrtype (MULTICAST): pass
addrtype (BROADCAST): pass
icmp (destination-unreachable): pass
icmp (source-quench): pass
icmp (time-exceeded): pass
icmp (parameter-problem): pass
icmp (echo-request): pass

== IPv6 ==
Creating 'ufw-check-requirements6'... done
Inserting RETURN at top of 'ufw-check-requirements6'... done
TCP: pass
UDP: pass
destination port: pass
source port: pass
ACCEPT: pass
DROP: pass
REJECT: pass
LOG: pass
hashlimit: pass
limit: pass
ctstate (NEW): pass
ctstate (RELATED): pass
ctstate (ESTABLISHED): pass
ctstate (INVALID): pass
ctstate (new, recent set): pass
ctstate (new, recent update): pass
ctstate (new, limit): pass
interface (input): pass
interface (output): pass
multiport: pass
comment: pass
icmpv6 (destination-unreachable): pass
icmpv6 (packet-too-big): pass
icmpv6 (time-exceeded): pass
icmpv6 (parameter-problem): pass
icmpv6 (echo-request): pass
icmpv6 with hl (neighbor-solicitation): pass
icmpv6 with hl (neighbor-advertisement): pass
icmpv6 with hl (router-solicitation): pass
icmpv6 with hl (router-advertisement): pass
ipv6 rt: pass

All tests passed

Code: (Select All)

root@kvm-P************:~# journalctl -xe
Jun 10 01:06:41 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:06:50 kvm- systemd-timesyncd[280]: interval/delta/
Jun 10 01:07:18 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:07:42 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:07:48 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:07:59 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:07:59 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:07:59 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:08:05 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:08:06 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:08:25 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:08:34 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:08:40 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:08:47 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:08:54 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:08:54 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:08:55 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:08:59 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:09:01 kvm- CRON[14894]: pam_unix(cron:session): se
Jun 10 01:09:01 kvm- CRON[14895]: (root) CMD (  [ -x /usr/li
Jun 10 01:09:01 kvm- CRON[14894]: pam_unix(cron:session): se
Jun 10 01:09:30 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
Jun 10 01:09:40 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00
lines 979-1001/1001 (END)
Jun 10 01:06:41 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:06:50 kvm- systemd-timesyncd[280]: interval/delta/delay/jitter/drift 2048s/+0.000s/0
Jun 10 01:07:18 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:07:42 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:07:48 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:07:59 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:07:59 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:07:59 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:08:05 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:08:06 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:08:25 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:08:34 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:08:40 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:08:47 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:08:54 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:08:54 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:08:55 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:08:59 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:09:01 kvm- CRON[14894]: pam_unix(cron:session): session opened for user root by (uid
Jun 10 01:09:01 kvm- CRON[14895]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d
Jun 10 01:09:01 kvm- CRON[14894]: pam_unix(cron:session): session closed for user root
Jun 10 01:09:30 kvm- kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
Jun 10 01:09:40 kvm-kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:ed:30:1b:3c:61:04:5b:2a:c1:
~
~
~
~
~
~
lines 979-1001/1001 (END)