ufw-deny
Block traffic through the firewall. tldr-pages
On Linux
Linux
Deny all traffic on a port
sudo ufw deny portIdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Deny traffic for a protocol on a port
sudo ufw deny port/protocolIdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Deny incoming traffic for a protocol and add a comment for documentation
sudo ufw deny in protocol comment 'comment'IdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Deny all traffic from a source address
sudo ufw deny from source_addressIdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Deny all incoming traffic from the subnet 192.168.13.0/24
sudo ufw deny from 192.168.13.0/24IdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Deny UDP traffic from 192.168.1.12 to 192.168.1.100 on port 8080
sudo ufw deny from 192.168.1.12 to 192.168.1.100 port 8080 proto udpIdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Deny all incoming IGMP traffic to 192.168.1.100 on the eth0 interface
sudo ufw deny in on eth0 to 192.168.1.100 proto igmpIdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community