Ubuntu 22.04 LTS – UFW is enabled but expected rules are not applied

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Traffic is unexpectedly allowed or blocked despite existing UFW rules.

Environment & Reproduction

Happens when iptables-nft chains conflict with stale or duplicate rules.

Root Cause Analysis

Rule order or backend mismatch causes UFW intent to differ from active packet filtering.

Quick Triage

Review numbered UFW rules and effective iptables chains.

Step-by-Step Diagnosis

Compare configured policy to observed packet counters for impacted ports.

Solution – Primary Fix

Normalize UFW ruleset, remove duplicates, and reload firewall state.

Solution – Alternative Approaches

Delete specific incorrect rules by index and reinsert in proper order.

Verification & Acceptance Criteria

Only intended services are reachable and denied traffic increments counters.

Rollback Plan

Reapply saved UFW profile if reset introduces service disruptions.

Prevention & Hardening

Manage firewall rules as code and avoid manual ad hoc edits.

Related Errors & Cross-Refs

Related to nftables chain precedence and duplicate allow rules.

Related tutorial: View the step-by-step tutorial for Ubuntu 22.04 LTS.

View all Ubuntu 22.04 LTS tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Ubuntu 22.04 UFW administration and packet-filter troubleshooting docs.