TFTP Breaks with UFW Enabled on Ubuntu 20.04
-
I am setting up a Fog server and got everything working as it should. However, when I enable UFW I am not able to transfer the image over TFTP. I have a rule allowing port 69, and the connection is able to initiate. It appears then that the file transfer gets done over a higher numbered port, and UFW blocks that. My understanding is that UFW should allow an already established connection like this to happen. I tried enabling the nf_conntrack and nf_conntrack_tftp kernel modules, and adding these 2 lines to /etc/ufw/before.rules
-A ufw-before-input -p udp -m state --state ESTABLISHED,RELATED -j ACCEPT -A ufw-before-input -p udp --dport 69 -m state --state NEW -j ACCEPT
Is this expected behavior for UFW? Everything I’m reading seems to just point to
ufw allow tftp
orufw allow 69
. Anyone else out there running FOG with UFW enabled successfully?Thanks!