Virtualmin Removed UFW in Ubuntu

[pologoalie8908]

SYSTEM INFORMATION
OS type and version	Ubuntu 22.04.3 LTS
Virtualmin version	7.9.0

So I wanted to run a test on a new VM i am setting up, so free version of Virtualmin is being installed.

Prior to Virtualmin install, I enabled UFW for the OS. But once I installed Virtualmin, it appears that UFW was completely removed. When i run 'sudo ufw status" is shows it as command not found.

Is this normal? I would think without it enabled, I cant open up ports like 10000 or mail ports for the servers on Virtualmin to use.

I can go back after the fact and install and enable UFW, but then the system loses internet connection.

[stefan1959]

@pologoalie8908

I enabled UFW for the OS

firewallD is used by Virtualmin not UFW.

[pologoalie8908]

Hmm. Was this a recent implementation? I dont recall it being a thing before?

Hmm so i do see I am able to SSH into the OS still.

I was trying to figure out why i was unable to access the virtualmin dashboard form an external IP, so i started with UFW.

So bottom line, use Firewall ID in the virtualmin Instance now instead?

[stefan1959]

Every Virtualmin install I’ve done has used firewallD, but I use Rocky or Centos.
Joe explained above that you can remove firewallD and add UFW, but not sure what GUI you get as I’ve never used it.

[pologoalie8908]

ok thanks. i think this might be better in firewallid.

I just now need to figure out why i cant access the dashboard from outside my LAN.

[stefan1959]

port 10000 should be open in the firewall.
Maybe the install you did pre-install is causing a conflict. Virtualmin should be installed on a clean OS without installing anything first.

[Joe]

@pologoalie8908

Hmm. Was this a recent implementation? I dont recall it being a thing before?

It’s been the default since Virtualmin 6. So, a few years.

Our docs say “don’t preinstall or preconfigure anything before installing Virtualmin”, so you should generally follow the docs.

You can switch to ufw, or any other changes to the services you want to make, after installation. But, you’ll also need to make sure fail2ban is correctly configured for it, if you want to use fail2ban (I’m not sure if it needs anything custom for ufw, as I don’t use ufw…it probably can still just manage the rules with ipset, since everybody is using iptables on the backend).

[pologoalie8908]

I can do a reinstall no issue. Thanks. Ill try it fresh install and see.

[Joe]

You don’t need to reinstall over this.

I just meant if you’d done the install on a fresh OS, you would have had no surprises.

[pologoalie8908]

Understood. I am just testing stuff. So if it helps me learn, this VM was only built today. I dont mind reinstalling only takes a few minutes

[pologoalie8908]

So i think i need to look at my VM setup on my network. My VM is on Unraid and im using Nginx Proxy Manger to help handle a couple of docker containers . Just need to figure out how to get my Virtualmin instance out through NPM

[Stegan]

@pologoalie8908

So i think i need to look at my VM setup on my network.

No the message is clear you start with a clean VM do not install anything before you install Virtualmin

[pologoalie8908]

It is a clean OS and virtualmin install. Nothing changed.

My Virtual machine is on Unraid and I’m running NPM, so it’s likely that it’s stuck there

[stefan1959]

Probably no one here runs NPM, I presume its doing some sort of routing of traffic so its best you take it up with the NPM community. Have you got a diagram of where VM sits in your network.

[Stegan]

@pologoalie8908

Prior to Virtualmin install, I enabled UFW for the OS.

So you did do something “prior to Virtualmin install”

[pologoalie8908]

Pretty confident you didnt read the reset of these replies…I have already reinstalled the whole OS and Virtualmin form scratch. not using UFW now.

[pologoalie8908]

When i say look at my VM setup on my network, I mean Virtual Machine and its network setup in relation to the Network. ie: my hypervisor is Unraid. I also run NPM to host other things like docker. My ISP also has its firewall for the whole network. So yes, i do need to check the settings up until my VM. Because something is obviously not right.

No changes have been made to the VM OS, except installed Virtualmin.

[juanpf]

If I may add to the post. I use ConfigServer Security & Firewall as it is a more reliable UFW and works 100% in Virtualmin. It also incorporate lfd as part of the firewall.