UFW Firewall Generator

IP Addresses (one per line)

Leave empty to allow any IP (not recommended)

TCP Ports

Comma-separated list of ports

UDP Ports

Comma-separated list of ports

Cloudflare Mode Active

Only traffic from Cloudflare IP ranges will be accepted for web ports. SSH will be rate-limited for protection.

Web Port (HTTP)

Web Port (HTTPS)

SSH Port

SSH will be rate-limited to protect against brute force

Enable logging Enable IPv6 Allow established connections Rate limit SSH (brute force protection) Dynamic Cloudflare IPs (fetch latest)