--- /usr/share/man/man8/ufw.8 2008-03-01 16:07:43.000000000 +0000 +++ ufw.8 2008-03-01 15:59:39.000000000 +0000 @@ -11,15 +11,15 @@ .TP ufw [\fB\-\-dry\-run\fR] \fBenable|disable\fR .TP -ufw [\fB\-\-dry\-run\fR] \fBdefault\fR allow|deny +ufw [\fB\-\-dry\-run\fR] \fBdefault\fR allow|deny|reject .TP ufw [\fB\-\-dry\-run\fR] \fBlogging\fR on|off .TP ufw [\fB\-\-dry\-run\fR] \fBstatus\fR .TP -ufw [\fB\-\-dry\-run\fR] [\fBdelete\fR] \fBallow|deny\fR PORT[/protocol] +ufw [\fB\-\-dry\-run\fR] [\fBdelete\fR] \fBallow|deny|reject\fR PORT[/protocol] .TP -ufw [\fB\-\-dry\-run\fR] [\fBdelete\fR] \fBallow|deny\fR [\fBproto\fR protocol] [\fBfrom\fR ADDRESS [\fBport\fR PORT]] [\fBto\fR ADDRESS [\fBport\fR PORT]] +ufw [\fB\-\-dry\-run\fR] [\fBdelete\fR] \fBallow|deny|reject\fR [\fBproto\fR protocol] [\fBfrom\fR ADDRESS [\fBport\fR PORT]] [\fBto\fR ADDRESS [\fBport\fR PORT]] .SH OPTIONS .TP @@ -38,7 +38,7 @@ \fBdisable\fR unloads firewall and disables firewall on boot .TP -\fBdefault\fR allow|deny +\fBdefault\fR allow|deny|reject change the default policy for incoming traffic. Note that existing rules will have to be migrated manually when changing the default policy. .TP @@ -54,14 +54,17 @@ \fBdeny\fR RULE deny RULE. See \fBRULE SYNTAX\fR .TP -\fBdelete\fR allow|deny RULE -deletes the corresponding allow/deny RULE +\fBreject\fR RULE +reject RULE. See \fBRULE SYNTAX\fR +.TP +\fBdelete\fR allow|deny|reject RULE +deletes the corresponding allow/deny/reject RULE .SH "RULE SYNTAX" .PP Users can specify rules using either a simple syntax or a full syntax. The simple syntax only specifies the port and optionally the protocol to be -allowed or denied on the host. For example: +allowed, denied or rejected on the host. For example: ufw allow 53 @@ -115,6 +118,11 @@ ufw allow 80/tcp .PP +Reject all access to tcp port 25: + + ufw reject 25/tcp + +.PP Allow all access from RFC1918 networks to this host: ufw allow from 10.0.0.0/8 @@ -131,6 +139,11 @@ ufw allow proto udp from 1.2.3.5 port 5469 to 1.2.3.4 port 5469 +.PP +Reject access to tcp 1.2.3.4 port 21 from 1.2.3.5: + + ufw reject proto tcp from 1.2.3.5 to 1.2.3.4 port 21 + .SH REMOTE MANAGEMENT .PP When running \fBufw enable\fR or starting \fBufw\fR via its initscript,