I’m using Ubuntu 20.04 with Postfix, Dovecot and UFW,
when installing both Postfix and Dovecot I immediately noticed they’re adding their own rules into iptables, however using the UFW commands I can’t override those since those rules are above
root@example:~# iptables -S INPUT
-P INPUT DROP
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 587 -j ACCEPT
-A INPUT -j ufw-before-logging-input
-A INPUT -j ufw-before-input
-A INPUT -j ufw-after-input
-A INPUT -j ufw-after-logging-input
-A INPUT -j ufw-reject-input
-A INPUT -j ufw-track-input
Now this won’t allow me to e.g. completely block abusive IPs, removing the rules doesn’t help since they’re back as soon as the server reboots, my question is if (preferably) there is a way for me to disable these rules being added and just include them in UFW, or do I have to block the IPs using iptables?
