How to know if iptables is running?

[Aporie]

Yeah I think it is a major issue here. Vestacp team should do something about it. How can we know firewall rules are active and chained to ufw on ubuntu? Wouldn't it be easier to set ufw for ubuntu in vestacp software list?

Code: Select all

sudo ufw status
Status: active

But no rules defined.

Code: Select all

sudo iptables -L -n
Chain INPUT (policy DROP)
target     prot opt source               destination         
f2b-sshd   tcp  --  0.0.0.0/0            0.0.0.0/0            multiport dports 22
fail2ban-VESTA  tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:8083
fail2ban-MAIL  tcp  --  0.0.0.0/0            0.0.0.0/0            multiport dports 25,465,587,2525,110,995,143,993
fail2ban-FTP  tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:21
fail2ban-SSH  tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:22

A lot of rules defined but are they handled by ufw?

Code: Select all

sudo service iptables status
Unit iptables.service could not be found.

So basically there is no rules set for ufw and iptables seems not to be installed (which make sense) but then how everything works fine as there is no rules set for ufw? Is really the server secure?