Как настроить UFW так, чтобы разрешить доступ только с IP-адресов, принадлежащих диапазону .192.168.2.0/24, и запретить доступ с других IP-адресов?

To allow access only from IP addresses within the range .192.168.2.0/24 and deny access from other IP addresses, follow these steps:

1. Open the terminal.

2. Check if UFW (Uncomplicated Firewall) is installed by running the command:
   ```bash
   sudo ufw version
   ```

   If UFW is not installed, install it by running:
   ```bash
   sudo apt-get install ufw
   ```

3. Enable UFW by running:
   ```bash
   sudo ufw enable
   ```

4. Set the default policy to deny all incoming connections by running:
   ```bash
   sudo ufw default deny incoming
   ```

5. Allow access from the specified IP address range (.192.168.2.0/24) by running:
   ```bash
   sudo ufw allow from 192.168.2.0/24
   ```

6. Check the status of UFW by running:
   ```bash
   sudo ufw status verbose
   ```

   You should see:
   ```
   Status: active
   ```
   ```
   Default: deny (incoming), allow (outgoing)
   ```

   And under "Incoming," you should see:
   ```
   192.168.2.0/24      ALLOW IN       Anywhere
   ```

Now UFW is configured to allow access only from IP addresses within the range .192.168.2.0/24 and deny access from other IP addresses.

If you want to restrict access to a specific port or service, you can add an additional rule specifying the port or service. For example, to allow access to port 80 (HTTP) from the specified IP address range, run:
```bash
sudo ufw allow from 192.168.2.0/24 to any port 80
```

sudo ufw deny incoming tcp ports 80, 443 from specified IP addresses to specific destination and application

Воспользуйтесь командой "sudo ufw deny incoming tcp ports 80, 443 from specified IP addresses", чтобы запретить входящий tcp на порты 80 и 443 с указанных IP-адресов. Указывайте также конкретное назначение и требуемое приложение. Например, "sudo ufw deny incoming tcp ports 80, 443 from 192.168.2.0/24 to example.com"