Ubuntu 20.04 LTS – UFW policy change blocks SSH and remote administration – Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Remote SSH access fails immediately after firewall policy updates.

Environment & Reproduction

Ubuntu 20.04 server managed only over network without console fallback.

Root Cause Analysis

Default deny rules enabled before explicit SSH allow rules were active.

Quick Triage

Access console path and inspect ufw status numbered output.

Step-by-Step Diagnosis

Evaluate rule order, interface scope, and source CIDR constraints.

Solution – Primary Fix

Add explicit SSH allow rule, confirm ordering, and reload firewall.

Solution – Alternative Approaches

Use out-of-band management and staged firewall activation scripts.

Verification & Acceptance Criteria

SSH connections succeed from approved networks while unwanted ports remain blocked.

Rollback Plan

Disable UFW from console and restore prior baseline ruleset.

Prevention & Hardening

Apply firewall changes with timed rollback and preflight connectivity tests.

Related Errors & Cross-Refs

Cloud security groups can combine with UFW to create hidden double blocks.

Related tutorial: View the step-by-step tutorial for Ubuntu 20.04 LTS.

View all Ubuntu 20.04 LTS tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

UFW administration and safe remote rule deployment practices.