UFW BLOCK IN wlan0 OUT eth0

[franze_m]

Hello,
i try to make a Hotspot on my PC and have trouble with the UFW firewall.
I have to following UFW-Rules to protect my pc und forward from Hotspotinterface wlan0 to eth0 (Internet).

To Action From
-- ------ ----
[ 1] 22 ALLOW IN Anywhere
[ 2] 80 ALLOW IN Anywhere
[ 3] 443 ALLOW IN Anywhere
[ 4] 22/tcp LIMIT IN Anywhere
[ 5] 224.0.0.1 DENY IN Anywhere
[ 6] 53 on wlan0 ALLOW IN 192.168.150.0/24
[ 7] 10.0.2.15 on wlan0 ALLOW IN Anywhere
[ 8] 22 ALLOW IN Anywhere (v6)
[ 9] 80 ALLOW IN Anywhere (v6)
[10] 443 ALLOW IN Anywhere (v6)
[11] 22/tcp LIMIT IN Anywhere (v6)
[12] 67/udp on wlan0 ALLOW IN 68/udp

raspberrypi:/home/pi# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 10.0.2.2 0.0.0.0 UG 202 0 0 eth0
10.0.2.0 * 255.255.255.0 U 202 0 0 eth0
192.168.150.0 * 255.255.255.0 U 0 0 0 wlan0

dmesg:
[41009.174661] UFW BLOCK IN=wlan0 OUT=eth0 MAC=7c:dd:90:22:a0:11:6c:ad:f8:1f:ea:b9:08:00 SRC=192.168.150.9 DST=195.185.37.60 LEN=655 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=UDP SPT=33072 DPT=5060 LEN=635

What command i must insert in ufw to solve the Block ?
with regards
Markus

[GreyGeek]

Don't you need an OUT rule for eth0?

[franze_m]

Deny all Rule

Don't you need an OUT rule for eth0?

Hello GrexGeek,
i have a deny all default Rule, so i must allow all traffic.

with regards

Markus

[GreyGeek]

10.0.2.15 on wlan0 ALLOW IN Anywhere

There's your IN for etho
Where's your OUT for 10.0.2.15 ?