Comment on page
Firewall Configurations
The UFW firewall can be used to control the network access to your node With any new installation, UFW is disabled by default. You will have to enable it with the following steps:
Deny any incoming and outgoing traffit
sudo ufw default deny incoming
sudo ufw default allow outgoing
Allow ssh access
sudo ufw allow ssh (port 22 or your ssh port number) /tcp
Allow cardano-node p2p port
sudo ufw allow (your port #) /tcp
Allow chrony ntp
sudo ufw allow 123/udp
Enable Firewall
sudo ufw enable
Verify status
sudo ufw status numbered
Only open these following ports on nodes behind a network firewall Allow grafana web server port
sudo ufw allow 3000/tcp
Allow prometheus endpoint port
sudo ufw allow 9100/tcp
Allow prometheus cardano-node metric data port
sudo ufw allow 12798/tcp
This next step is optional but recomended to follow Permitting connections from a specific IP can be set up by following these next commands
sudo ufw allow (your laptop)
Example
- sudo ufw allow from (182.382.84.22)
Last modified 2yr ago