Comments (4)
@Bronislawsky Please kindly add this to the existing Issue on this topic instead:
If you can use more descriptive titles when creating Issues, it would also help the community understand a bit more about what you're reporting. Thanks!
from slickstack.
Alright, Issue was 'closed' that's why I created new one..
I am pretty git new, I will pay attention.
Precision in this issue, no matter if you add custom rules or not
as soon as ss's user.rules is copied over /etc/ufw/user(6).rules
it will not survive a 'ufw reload' because user.rules is not well formatted.
from slickstack.
`typo in ss-install.txt
ufw allow @SSH_PORT
should be
ufw allow $SSH_PORT
########### This block generates user.rules and user6.rules ############
ufw default deny incoming
ufw default allow outgoing
ufw allow $SSH_PORT
ufw allow 80
ufw allow 443
ufw allow 6379
#######################################################################
I think, these lines
#################################################################################
wget -O /tmp/user.rules http://mirrors.slickstack.io/ufw-firewall/user-rules.txt
if [[ -z "$SSH_PORT" ]]; then
sed -i "s/@SSH_PORT/6969/g" /tmp/user.rules
else
sed -i "s/@SSH_PORT/${SSH_PORT}/g" /tmp/user.rules
fi
cp /tmp/user.rules /etc/ufw/user.rules
chown root:root /etc/ufw/user.rules
chmod 0664 /etc/ufw/user.rules
##################################################################################
is useless because it overwrite the previously generated user(6).rules
and if for some reson 'ufw reload' is executed, you get jailed out from ipv4.
ipv6 rules will persiste because it hasn't been override with the faulty
cp /tmp/user.rules /etc/ufw/user.rules
IMHO
wget -O /tmp/user.rules http://mirrors.slickstack.io/ufw-firewall/user-rules.txt
should not happend at all.`
from slickstack.
Locking this thread as a similar Issue already exists, please add comments there, thanks ~
from slickstack.
Related Issues (20)
- Auto restart MySQL service if it went down HOT 2
- MySQL and/or Redis crashing sometimes on Ubuntu 20.04 HOT 4
- Consider replacing Nginx with Caddy HOT 7
- Exiting ss-update-config: There is a version mismatch between this script and public mirrors.. HOT 1
- Migration slickstack between VPS to VPS HOT 1
- change php version and Install ioncube loader HOT 4
- Install freeze on Running ss-install-redis-packages... HOT 3
- Website very slow loading inside apps ios HOT 3
- CERT_AUTHORITY_INVALID After install HOT 1
- SUDO_USER and SFTP_USER validation check to avoid conflicts? HOT 2
- Perform custom tasks during certain SlickStack scripts HOT 1
- Invalid user mysql:mysql error when using remote database HOT 1
- Ensure more privacy for openssl cert generation. HOT 11
- SS_ADMINER_PUBLIC="false" does not work as intended. HOT 9
- Allow tuning of PHP8 JIT settings (opcache.jit options in php.ini) HOT 4
- Cloudflare real visitor IP support in Nginx config HOT 18
- Option to allow only Cloudflare IPs to connect to origin server HOT 2
- OpenVZ PHP-FPM "Unable to set priority for the master process: Permission denied" HOT 9
- Support for custom Permissions Policy HTTP header in Nginx HOT 6
- Improve WP-Cron robustness for Multisite environments HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from slickstack.