Skip to main content
Solved

Hardened linux repository firewall


damien commenge
Forum|alt.badge.img+5

Hello,

I’m using Ubuntu 24.04 and I would like to know how do you configure firewall on this system to allow only required port please ? 

If my research are correct, I could see I need only 22 + 6160 + 6162 port open and Veeam open the others when needed

I think I understand the commands are differents if you setup it before you add it as managed server or after. Could you provide me both solution please ? 

 

Thanks for your help

Best answer by damien commenge

@Chris.Childerhose ​@coolsport00 

Thanks both for your answer.

Finally I just tested it and it’s “easy”.

I just setup the linux hardened repository and add it to Veeam.

After it, I execute “ufw enable” to enable the integrated firewall with Ubuntu 24.04.

Restart the linux server and the rules are automatically added.

For your information it’s 6160 + 6162 and then it dynamically add the 2500-3000 as needed during the backup. It’s the reason I asked some help :) but finally I found it !

For sure, if you want to be able to connect to SSH on the server later (normally not needed since 12.2) you have to add the rule for SSH.

View original
Did this topic help you find an answer to your question?

6 comments

Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 8400 comments
  • December 13, 2024

You need to open more ports than that, so check here - https://helpcenter.veeam.com/docs/backup/vsphere/used_ports.html?ver=120#microsoft-windows-linux-based-backup-repository

Which commands are you referring to?  A simple Google search will give you the required commands for Ubuntu.


coolsport00
Forum|alt.badge.img+20
  • Veeam Legend
  • 4109 comments
  • December 13, 2024

Hi ​@damien commenge -

Chris shared the page for the ports needing opened. Below are a couple URLs which share good overview on ‘how-to’ configure an Ubuntu f/w using the ufw command:

https://ubuntu.com/server/docs/firewalls

https://ubuntuhandbook.org/index.php/2024/07/enable-disable-configure-firewall-ubuntu/

Those should get you to where you need to go. Let us know.

Best.

 


damien commenge
Forum|alt.badge.img+5
  • Author
  • Veeam Legend
  • 115 comments
  • Answer
  • December 14, 2024

@Chris.Childerhose ​@coolsport00 

Thanks both for your answer.

Finally I just tested it and it’s “easy”.

I just setup the linux hardened repository and add it to Veeam.

After it, I execute “ufw enable” to enable the integrated firewall with Ubuntu 24.04.

Restart the linux server and the rules are automatically added.

For your information it’s 6160 + 6162 and then it dynamically add the 2500-3000 as needed during the backup. It’s the reason I asked some help :) but finally I found it !

For sure, if you want to be able to connect to SSH on the server later (normally not needed since 12.2) you have to add the rule for SSH.


coolsport00
Forum|alt.badge.img+20
  • Veeam Legend
  • 4109 comments
  • December 14, 2024

Glad you got it working. Hopefully we helped a bit. 

Best. 


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 8400 comments
  • December 14, 2024

Glad to hear it was easy and now working.


AndrePulia
Forum|alt.badge.img+5
  • Veeam Legend
  • 318 comments
  • December 14, 2024
coolsport00 wrote:

Hi ​@damien commenge -

Chris shared the page for the ports needing opened. Below are a couple URLs which share good overview on ‘how-to’ configure an Ubuntu f/w using the ufw command:

https://ubuntu.com/server/docs/firewalls

https://ubuntuhandbook.org/index.php/2024/07/enable-disable-configure-firewall-ubuntu/

Those should get you to where you need to go. Let us know.

Best.

 

SHane, those articles are so good to anyone who doesn’t know linux enough!!!