Replace 109.201.128.0 in the above command with the IP of your VPN. sudo ufw allow out from any to 109.201.128.0 But it's really annoying to need to turn firewall on and off each time we want to connect to a VPN, so we'll add an exception for establishing the initial connection to the VPN server. So now all traffic is allowed on VPN and no traffic is allowed without VPN. So add it if you want: sudo ufw allow in on tun0 from any to any Now security-wise you don't need to allow incoming traffic to use the internet, but you may want to require it (for example for seeding torrents this is necessary). If you are using OpenVPN and TUN as network adapter (you most probably are) then we call the network interface as tun0.Īllow outgoing traffic on tun0: sudo ufw allow out on tun0 from any to any Now we want to make it so there is an exception for VPN.

sudo ufw default deny outgoingĭo this for incoming also: sudo ufw default deny incoming Now we are going to block all traffic on the computer. ) you'll need to resolve the URL to find IP address (since we are going to block DNS requests that don't go over VPN). ovpn for the PureVPN server you want to add find the IP address of the server you are connecting to. UFW is the default firewall in Ubuntu, so it is already installed, no need doing that, and should already be set to launch at startup. Ignore IP tables makes things complicated.

Purevpn app will not connect