Ubuntu 24.04 LTS UFW Blocks Docker Published Ports

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Services in Docker containers are unreachable externally despite successful container startup.

Environment & Reproduction

Ubuntu 24.04 LTS with ufw enabled and Docker bridge networking for web workloads.

Root Cause Analysis

iptables chain order between UFW and Docker NAT/forward rules blocks intended ingress.

Quick Triage

Validate container port binding and compare host firewall default forward policy.

docker ps --format '{{.Names}} {{.Ports}}'; sudo ufw status verbose

Step-by-Step Diagnosis

Inspect nft/iptables effective rules and trace packet path for dropped traffic.

sudo iptables -S; sudo iptables -t nat -S; sudo journalctl -u ufw --since '1 hour ago'

Solution – Primary Fix

Set DEFAULT_FORWARD_POLICY to ACCEPT where required and add explicit ufw route allow rules.

sudo sed -i 's/^DEFAULT_FORWARD_POLICY=.*/DEFAULT_FORWARD_POLICY="ACCEPT"/' /etc/default/ufw && sudo ufw reload

Solution – Alternative Approaches

Use rootless Docker, reverse proxy on host, or dedicated firewall appliance in front.

Verification & Acceptance Criteria

External client reaches published container ports and security policy remains least privilege.

Rollback Plan

Restore prior ufw defaults and remove custom route allowances if behavior worsens.

Prevention & Hardening

Document expected exposed ports and test firewall regression in CI for container stacks.

Related Errors & Cross-Refs

Correlates with bridge misconfiguration and host-level reverse proxy bind failures.

Related tutorial: View the step-by-step tutorial for Ubuntu 24.04 LTS.

View all Ubuntu 24.04 LTS tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

UFW docs, Docker networking docs, and Ubuntu firewall guidance.