How do I prevent locking myself out of SSH when enabling UFW?

Always run 'ufw allow 22/tcp' (or 'ufw limit 22/tcp') BEFORE running 'ufw enable'. Keep your existing SSH terminal session open in one window while opening a second terminal window to test connection before closing.

What does 'ufw limit' do for SSH protection?

The 'ufw limit 22/tcp' command automatically denies connections from an IP address that has attempted 6 or more connections within 30 seconds, blocking automated brute-force password scans.

Contact Log in Get Started →

Pricing

View Plans →

Verified 5.0 Clutch RatingAZBrand Cloud

Chmod CalculatorPermissions Firewall BuilderUFW & Firewalld Bash Script GenStrict Mode

UFW • Firewalld • Iptables • Anti-Lockout

Linux Firewall Rule Generator

Visually build hardened firewall configurations and rate-limiting scripts for Ubuntu UFW, AlmaLinux Firewalld, and Iptables.

Firewall Engine:

Preset:

Active Port & Traffic Rules (3):

Port:

Protocol:

Action:

Source IP / CIDR:

Comment:

Port:

Protocol:

Action:

Source IP / CIDR:

Comment:

Port:

Protocol:

Action:

Source IP / CIDR:

Comment:

Generated Bash Firewall Script:

#!/bin/bash
# Ubuntu / Debian UFW Firewall Setup
set -euo pipefail

sudo ufw --force reset
sudo ufw default deny incoming
sudo ufw default allow outgoing

sudo ufw limit 22/tcp comment "SSH Brute-Force Protection"
sudo ufw allow port 80/tcp comment "HTTP Web Traffic"
sudo ufw allow port 443/tcp comment "HTTPS Secure Web"

sudo ufw --force enable
sudo ufw status verbose

Enterprise DDoS Mitigation on AZBrand Cloud VPS

Protect your cloud servers with upstream hardware DDoS scrubbing and custom firewall filters from $3.99/mo.

Deploy Cloud VPS →

Host Hardening Architecture

Linux Host-Level Firewall Architecture

Host firewalls provide zero-trust perimeter defense on Linux instances. By enforcing a default DROP/DENY incoming policy, exposed internal services (like Redis on port 6379 or unauthenticated Elasticsearch) are shielded from public internet scans.

Firewall Administration

Linux Firewall Rule Generator

Linux Host-Level Firewall Architecture

Frequently Asked Questions