I have just installed version 6.8.27 of aaPanel on Debian 11 from scratch. Compared to previous versions (of aaPanel) I have noticed some panel malfunctions: after changing the default ports of aaPanel, SSH and FTP, the old ports (8888, 22, 21) cannot be deleted from the Security panel and the message "The system firewall is not open" appears. I installed the SYS Firewall plugin, now I can block them but not delete them. The SYS Firewall panel reports that it is in a "Running" state but in the Security risk the message: "Check whether the system firewall is enabled" keeps appearing. I gave the command "systemctl status ufw" from the terminal but it replies with: "Unit ufw.service could not be found". At this point I don't know if the firewall is enabled or not. Can you give me some advice on what to do? Ino

The system firewall is not open

ino

I have just installed version 6.8.27 of aaPanel on Debian 11 from scratch.

Compared to previous versions (of aaPanel) I have noticed some panel malfunctions:

after changing the default ports of aaPanel, SSH and FTP, the old ports (8888, 22, 21) cannot be deleted from the Security panel and the message "The system firewall is not open" appears.
I installed the SYS Firewall plugin, now I can block them but not delete them.

The SYS Firewall panel reports that it is in a "Running" state but in the Security risk the message: "Check whether the system firewall is enabled" keeps appearing.

I gave the command "systemctl status ufw" from the terminal but it replies with: "Unit ufw.service could not be found".

At this point I don't know if the firewall is enabled or not.

Can you give me some advice on what to do?
Ino

aaPanel_Kern

Check common system firewalls
systemctl status firewalld
systemctl status ufw
/sbin/iptables -nL
Can't delete what information is displayed?

ino

Can't delete the displayed information?
No,
via ssh here are the results:
root@:~# Check common system firewalls
-bash: Check: command not found
root@:~# systemctl status firewalld
Unit firewalld.service could not be found.
root@:~# systemctl status ufw
Unit ufw.service could not be found.
root@:~# /sbin/iptables -nL
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:21
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:5314
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:10136
DROP tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
DROP tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:8888

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
root@:~#

aaPanel_Kern

ino
Try installing ufw manually
apt install ufw

And set the relevant rules:

panelPort=7800
sshPort=22

/sbin/ufw allow 20/tcp
/sbin/ufw allow 21/tcp
/sbin/ufw allow 80/tcp
/sbin/ufw allow 888/tcp
/sbin/ufw allow 39000:40000/tcp
/sbin/ufw allow ${panelPort}/tcp
/sbin/ufw allow ${sshPort}/tcp
/sbin/ufw reload
/sbin/ufw enable
/sbin/ufw status```