Editing Futotemporarywikipage (section)

==== 3.3 Configure Firewall (UFW) ====

UFW (Uncomplicated Firewall) provides a user-friendly interface for managing iptables. There is no need for anything besides onlyoffice to ever contact our WebDAV server, so we are going to make sure only localhost can contact our WebDAV server.

If you think this is ridiculous, it is. Onlyoffice needs to let me access files on my local server that are already there.

<ol style="list-style-type: decimal;">
<li><p>'''Allow all outgoing traffic:'''</p>
<pre>sudo ufw default allow outgoing</pre></li>
<li><p>'''Allow incoming traffic on port 8080 from specific sources:'''</p>
<pre>sudo ufw allow from 192.168.5.5 to any port 8080 proto tcp
sudo ufw allow from 127.0.0.1 to any port 8080 proto tcp
sudo ufw allow from 172.17.0.0/16 to any port 8080 proto tcp
sudo ufw allow from 172.18.0.0/16 to any port 8080 proto tcp</pre>
<p>This allows HTTPS traffic to WsgiDAV only from specific IP ranges.</p></li>
<li><p>'''Enable the firewall:'''</p>
<pre>sudo ufw enable</pre>
<p>This activates the firewall with the configured rules.</p></li></ol>

<span id="step-4-make-sure-this-works"></span>