나는 다음과 같은 규칙 세트를 가지고 있습니다
sudo ufw status numbered
Status: active
To Action From
-- ------ ----
[ 1] 41337/tcp ALLOW IN Anywhere
...
[15] 8080/tcp ALLOW IN Anywhere
[16] 4001/tcp ALLOW IN Anywhere
하지만 여전히 UFW BLOCK
로그 항목이 수신됩니다 dmesg
.
[Mon Jan 20 13:28:42 2020] [UFW BLOCK] IN=enp3s0 OUT= MAC=74:xx:xx:xx:e5:xx:xx:45:cb:59:xx:b0:08:xx SRC=49.XXX.XXX.XXX DST=192.168.XXX.XXX LEN=60 TOS=0x00 PREC=0x00 TTL=112 ID=894 DF PROTO=TCP SPT=4001 DPT=4001 WINDOW=8192 RES=0x00 ACK SYN URGP=0
[Mon Jan 20 13:28:54 2020] [UFW BLOCK] IN=enp3s0 OUT= MAC=74:xx:xx:xx:e5:xx:xx:45:cb:59:xx:b0:08:xx SRC=113.XXX.XXX.XXX DST=192.168.XXX.XXX LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=0 DF PROTO=TCP SPT=15559 DPT=4001 WINDOW=0 RES=0x00 RST URGP=0
왜 그런 겁니까?
편집하다
전체 테이블:
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), deny (routed)
New profiles: skip
To Action From
-- ------ ----
[ 1] 1337/tcp ALLOW IN Anywhere
[ 2] 8333/tcp ALLOW IN Anywhere
[ 3] 53/udp ALLOW IN Anywhere
[ 4] 51413/tcp ALLOW IN Anywhere
[ 5] 9117/tcp ALLOW IN Anywhere
[ 6] 53/tcp ALLOW IN Anywhere
[ 7] 8090/tcp ALLOW IN Anywhere
[ 8] 6881/udp ALLOW IN Anywhere
[ 9] 80/tcp ALLOW IN Anywhere
[10] 443/tcp ALLOW IN Anywhere
[11] 5351/udp ALLOW IN 17X.XXX.0.0/16
[12] 5351/udp ALLOW IN 17X.XXX.0.0/16
[13] 5351/udp ALLOW IN 17X.XXX.0.0/16
[14] 8084/tcp ALLOW IN Anywhere
[15] 8080/tcp ALLOW IN Anywhere
[16] 4001/tcp ALLOW IN Anywhere
[17] 5001/tcp ALLOW IN 10.X.X.X/24