Server cannot get online

[ScorpFire]

Hi,

I have a Ubuntu VPS which i am trying to configure. With UFW disabled, my server can be seen in server browser and can be connected to (Works perfectly). But after i turn on ufw (status ufw enable) the server is not seen in the server browser, it cannot be connected to also (totally offline)

My server specs:

Server OS: Ubuntu 11.04 - 32 bit
Processor: VPS (Open VZ)
Ram: 1 GB
Game(s): CSS

Start Up Command: ./srcds_run -console -game cstrike +map de_dust2 +ip X.X.X.X +maxplayers 32 -autoupdate +port 27200

Admin Mods: SourceMod, MetaMod, and DAF

My UFW configuration as below:

Code:

To                         Action      From
--                         ------      ----
22                         ALLOW IN    Anywhere
21/tcp                     ALLOW IN    Anywhere
1200                       ALLOW IN    Anywhere
27000:27015/udp            ALLOW IN    Anywhere
27020:27039/tcp            ALLOW IN    Anywhere
27040:27041/tcp            ALLOW IN    Anywhere
27015                      ALLOW IN    Anywhere
20                         ALLOW IN    Anywhere
27020                      ALLOW IN    Anywhere
27200                      ALLOW IN    Anywhere

I have tried the ufw fixes for OpenVZ, however it still doesnt work. Can anyone please help?

[Mike]

Run this and post the output:

Code:

iptables -L -v -n

[ScorpFire]

Thanks for helping me out. This is my output as below.

Code:

Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target     prot opt in     out     source               destination        
  27M 2985M ufw-before-logging-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
  27M 2985M ufw-before-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
  25M 2754M ufw-after-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
  25M 2754M ufw-after-logging-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
  25M 2754M ufw-reject-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
  25M 2754M ufw-track-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target     prot opt in     out     source               destination        
    0     0 ufw-before-logging-forward  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
    0     0 ufw-before-forward  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
    0     0 ufw-after-forward  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
    0     0 ufw-after-logging-forward  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
    0     0 ufw-reject-forward  all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target     prot opt in     out     source               destination        
  25M 6126M ufw-before-logging-output  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
  25M 6126M ufw-before-output  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
  25M 6125M ufw-after-output  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
  25M 6125M ufw-after-logging-output  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
  25M 6125M ufw-reject-output  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
  25M 6125M ufw-track-output  all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain ufw-after-forward (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-after-input (1 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 ufw-skip-to-policy-input  udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:137
    0     0 ufw-skip-to-policy-input  udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:138
    0     0 ufw-skip-to-policy-input  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:139
    0     0 ufw-skip-to-policy-input  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:445
    0     0 ufw-skip-to-policy-input  udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:67
    0     0 ufw-skip-to-policy-input  udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:68

Chain ufw-after-logging-forward (1 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 10 LOG flags 0 level 4 prefix `[UFW BLOCK] '

Chain ufw-after-logging-input (1 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 10 LOG flags 0 level 4 prefix `[UFW BLOCK] '

Chain ufw-after-logging-output (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-after-output (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-before-forward (1 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 ufw-user-forward  all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain ufw-before-input (1 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0          
   62  4408 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    0     0 ufw-logging-deny  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 4
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 12
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:67 dpt:68
   19  1000 ufw-not-local  all  --  *      *       0.0.0.0/0            0.0.0.0/0          
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            224.0.0.251         udp dpt:5353
    0     0 ufw-user-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain ufw-before-logging-forward (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-before-logging-input (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-before-logging-output (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-before-output (1 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0          
   53 17152 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    0     0 ufw-user-output  all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain ufw-logging-allow (0 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 10 LOG flags 0 level 4 prefix `[UFW ALLOW] '

Chain ufw-logging-deny (2 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID limit: avg 3/min burst 10
   11   582 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 10 LOG flags 0 level 4 prefix `[UFW BLOCK] '

Chain ufw-not-local (1 references)
pkts bytes target     prot opt in     out     source               destination        
   11   582 ufw-logging-deny  all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 10
   19  1000 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain ufw-reject-forward (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-reject-input (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-reject-output (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-skip-to-policy-forward (0 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain ufw-skip-to-policy-input (6 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain ufw-skip-to-policy-output (0 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain ufw-track-input (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-track-output (1 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW

Chain ufw-user-forward (1 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-user-input (1 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:22
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:1200
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1200
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 27000:27015
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 27020:27039
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 27040:27041
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:27015
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:27015
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:20
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:20
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:27020
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:27020
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:27200
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:27200

Chain ufw-user-limit (0 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 0 level 4 prefix `[UFW LIMIT BLOCK] '
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable

Chain ufw-user-limit-accept (0 references)
pkts bytes target     prot opt in     out     source               destination        
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain ufw-user-logging-forward (0 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-user-logging-input (0 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-user-logging-output (0 references)
pkts bytes target     prot opt in     out     source               destination        

Chain ufw-user-output (1 references)
pkts bytes target     prot opt in     out     source               destination

[Mike]

I don't see why you're using UFW, to me it's just complicated.

[koz]

If I were you I would switch your open VPS to the Linux CentOS 5.8 or 6. Ubuntu is just not what it use to be. I run 3 css servers on a 1 GB Open VPS and they run pretty stable. If you need recommendations for good VPS companies just drop a PM in my inbox.