UniFi Firewall Block Outbound Ports
HTML-код
- Опубликовано: 6 сен 2024
- Follow this quick guide to block outbound ports on the UniFi firewall. If you want to see a video on really locking down the outbound traffic let me know below!
Want to join us in learning how to deploy network services like this? Put your name on the training list now: williehowe.com...
Hire us! williehowe.com
Amazon Afflilate Links for Ubiquiti Gear:
UDM Pro Link: amzn.to/3LKaqBR
Standard UDM Link: amzn.to/3AKChvr
Affiliate Links (I earn a small percentage of the sale if you use these links):
My AmazonLink: www.amazon.com...
Netool: netool.io use code WHT to save at least 10%!
Digital Ocean Affiliate Link: m.do.co/c/39aa...
Patreon Link: / williehowe
Contact us for network consulting and best practices deployment today! We support all Grandstream, Synology, DrayTek, Obihai, Poly, Ubiquiti, MikroTik, Extreme, Palo Alto, and more!
Come back for the next video!
Twitter - @WillieHowe
TikTok - @whowe82
SUBSCRIBE! THUMBS-UP! Comment and Share!
Would love to see a video on locking down guest networks
Yes, I would like to see a video on blocking all traffic. Great Videos!!!!
Yes, I would like to see a video on blocking all traffic. Thanks for what you do Willie.
Yes, I want to see more because there's not a lot of content teaching about Unifi firewall with the latest interface.
i really like this format. One topic, quick and clean. I learn more here than any other creator. Thanks for getting to the point without a lot of fluff or production
Great video and thanks again. I want to see how you actually lock down all ports except the ones needed like 80,443,emails ports. I'm using pfsense and I want to see how you do it with unifi firewalls.
Yes, please.
Also let’s see a video on bandwidth vampires 😂 cause that’s what I’m dealing with
Thank Willie for this series of UniFi videos... What about restrict VPN clients to access only to a specific VLAN or a specific internal source using UniFi Firewall or Traffic Management rules?
I'm working on that
I would love to see a video on locking down networks and securing the IoT network.
Yes all
Yes. That would be nice to see blocking all traffic.
YES! Locking down Torrent! Would love to know how!
I am really interested in locking down the guest network. Would love to see that video
Please do that other firewall video
Fresh cup of coffee and some WillieHowe Content :)
Good video. This is a great suggestion, and the video was right to the point. It is a little different for anyone running the older controller versions (Cloud key gen 1). Anyway, I thought I would mention that it would be good to point out if there are multiple guest networks (I had such a case), 'Guest' networks by default in UniFi are able to communicate with each other. Not sure why that would be true, but there are automatically created rules for anything labelled a guest network to allow multiple guest networks to communicate with each other.
I only mention this, because I have a special network for 'recovery' testing for an application I support. Trying to be diligent, I created it as a guest network in the intent to 'isolate' it from the other networks. It was isolated from the corporate networks, just not from the other guest network. Yes, this might be an edge case. That's fair, but I think the point is important.
Let’s see the video to lock it down
Get you elaborate more on the double Nat vpn configuration you mentioned on the unifi vpn video. Thanks
That sounds like a great video idea. I vote you do it!
I would like to see a video on blocking all traffic. Thank you
Very good video Willie - you got my 'like' 🙂
Please show how to make that video
Please do the lock down n video
Check out the latest video.
When making a rule in the Traffic Management screen and targetting a device, it seems like the block and allow settings only affect outbound traffic from the device for the traffic the rule is set for and not inbound traffic (at least that is what others have told me when I asked why Iw as still getting internet traffic hits despite a block rule). Is there any way to make that block inbound traffic to the device as well? Or if that can only be done in the more normal firewall rule, how would you do things like block an app, or a domain, or a region of traffic in the firewall section? Seems like it wants an IP and/or a port for the firewall rule, so how would we find out what the IP or port the app we are trying to block is actually doing so we can add it to the firewall?
Yes, show the other video with only the (3) allowed ports. Also, show in the logs where it shows as blocked.