# accept any TCP ACK, RST, PSH or FIN those are fine to accept automatically -A ufw-before-input -p tcp --tcp-flags ACK ACK -j ACCEPT -A ufw-before-input -p tcp --tcp-flags FIN FIN -j ACCEPT -A ufw-before-input -p tcp --tcp-flags PSH PSH -j ACCEPT -A ufw-before-input -p tcp --tcp-flags RST RST -j ACCEPT # anything outgoing is fine -A ufw-before-output -j ACCEPT
Comments