How To: Enable and use /sbin/fwup in Ubuntu

  Security, Tools

IpserverOne has its own vfirewall rules recipe which are implemented on all Dedicated and Cloud hosting. These firewall rules are located in /sbin/fwup.

Usually /sbin/fwup is set as default and will load even after a server reboot.
However, there may be some customers who are aware of this /sbin/fwup, and may try to configure it on servers which have not been configured with it.

Take ticket IDG-848-65026 for example. This customer’s server is running on Ubuntu, which uses UFW as its default firewall.

However, this customer would like to enable and load these rules even after a server reboot. Usually we do not try to configure /sbin/fwup for servers which do not run Iptables or Firewalld.
Therefore, this guide is just for information purposes.

To enable /sbin/fwup in Ubuntu servers, we would first have to stop and disable UFW.
[cc]
update-rc.d -f ufw remove
sudo ufw disable
[/cc]

Then we would need to install iptables-persistent.
[cc]
apt-get install iptables-persistent
[/cc]

Once done, we would need to load the /sbin/fwup rules and save them to the default file.

/sbin/fwup
iptables-save > /etc/iptables/rules.v4

We would then need to add the line to the file into rc.local which loads the rules after a server reboot.

vi /etc/rc.local
/sbin/iptables-restore < /etc/iptables/rules.v4

Now /sbin/fwup will load after every reboot.