Secure Your Linux Server: Auto-Audit & Fix UFW Firewall Rules

Ideal for developers, sysadmins, or anyone managing Linux servers.

🚀 Introduction

Securing your Linux server is critical, especially when it’s exposed to the internet. One of the easiest and most effective tools to manage your server firewall is UFW (Uncomplicated Firewall).

In this guide, I’ll walk you through an interactive script I built that:

• Checks if UFW is installed and running
• Installs and enables it if needed
• Scans your firewall rules
• Identifies misconfigurations
• Suggests secure alternatives
• Optionally applies fixes (with care!)

Perfect for system admins, freelancers, or anyone running a VPS (e.g., AWS Lightsail, EC2, DigitalOcean, etc.).

🔧 Features of the Script

✅ Checks UFW status and installation
✅ Suggests rules based on common security guidelines
✅ Detects and warns about open dangerous ports (e.g., 22, 80 open to world)
✅ Recommends changing default SSH port
✅ Offers auto-fix with user confirmation
✅ Supports IPv4 and IPv6 scanning
✅ Logs findings for audit/compliance

🛡️ Example Recommendations:

• Change SSH Port: sudo nano /etc/ssh/sshd_config
• # Change Port 22 to 2222
• sudo systemctl restart ssh
• sudo ufw allow 2222/tcp
• sudo ufw delete allow 22/tcp

✅ Try It!

git clone https://github.com/mxkdevops/UFW-audit.git
cd ufw-audit-fixer
chmod +x ufw_audit.sh
sudo ./ufw_audit.sh

🔚 Conclusion

This tool helps Linux admins detect firewall vulnerabilities quickly, with easy-to-understand advice and the option to fix issues securely. It’s ideal for compliance audits, pentest prep, or day-to-day hardening.

Stay safe — automate wisely!