π ~1 min read
Table of contents
Symptom & Impact
Service is listening locally but remote clients cannot connect.
Environment & Reproduction
Common after firewall baseline updates.
sudo ufw status verbose
ss -tulpn | grep 443
curl -I https://localhost
Root Cause Analysis
Missing allow rule, wrong protocol, or incorrect source restrictions in UFW.
Quick Triage
Compare listening sockets with active firewall rules.
sudo ufw status numbered
ss -tulpn
sudo iptables -S | head -n 40
Step-by-Step Diagnosis
Trace denied packets and validate IPv4/IPv6 parity.
sudo grep -i deny /var/log/ufw.log | tail -n 40
sudo ufw status verbose
ip -4 addr show

Solution – Primary Fix
Add explicit allow rule and reload firewall policy.
Still having issues? Our IT Consulting team can diagnose and resolve this for you. Get in touch for a free consultation.
sudo ufw allow 443/tcp
sudo ufw reload
sudo ufw status

Solution – Alternative Approaches
Restrict access by subnet for tighter exposure control.
sudo ufw allow from 10.0.0.0/24 to any port 443 proto tcp
Verification & Acceptance Criteria
Remote access succeeds and policy survives reboot.
nc -zv 443
sudo ufw status
sudo systemctl restart ufw
Rollback Plan
Remove newly added rule if scope is broader than intended.
sudo ufw status numbered
sudo ufw delete
Prevention & Hardening
Manage firewall rules in version-controlled infrastructure code.
sudo ufw status numbered
sudo systemctl is-enabled ufw
Related Errors & Cross-Refs
May overlap with cloud security group restrictions and reverse proxy binds.
Related tutorial: View the step-by-step tutorial for Ubuntu 24.04 LTS.
View all Ubuntu 24.04 LTS tutorials on the Tutorials Hub β
Browse all common problems & solutions on the Tutorials Hub.
References & Further Reading
Ubuntu UFW administration and troubleshooting docs.
Need Expert Help?
If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today β we respond within one business day.