UFW Reference • Brooks Computing Systems

sudo ufw status – show rules + on/off
sudo ufw status verbose – logging, defaults, etc.
sudo ufw status numbered – rules with numbers (for delete)
sudo ufw enable – turn on + start at boot
sudo ufw disable – turn off (rules kept)
sudo ufw reload – apply changes
sudo ufw reset – wipe all rules (careful!)

Remote server → always allow SSH first:
sudo ufw allow OpenSSH or sudo ufw allow 22/tcp

sudo ufw default deny incoming
sudo ufw default allow outgoing

sudo ufw allow ssh or OpenSSH or 22
sudo ufw allow http or 80
sudo ufw allow https or 443
sudo ufw allow 3306
sudo ufw allow 3000:3999/tcp
sudo ufw allow from 192.168.1.50
sudo ufw limit ssh – rate limit brute-force
sudo ufw allow 'Nginx Full' – app profile

sudo ufw deny 23
sudo ufw deny from 203.0.113.55

Delete safely:
sudo ufw status numbered
sudo ufw delete 2

sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow OpenSSH
sudo ufw allow 'Nginx Full'      # or 'Apache Full' / 80,443/tcp
sudo ufw enable
sudo ufw status