Arch Linux

fjord_glyph

Member

Registered: 2025-10-20

Posts: 1

warp-cli and ufw

I want to deny all outgoing and incoming traffic except CloudflareWARP using ufw. Is this possible? I tried the following, but it just stops all internet traffic.

sudo ufw default deny incoming
sudo ufw default deny outgoing

sudo ufw allow in on CloudflareWARP
sudo ufw allow out on CloudflareWARP

sudo ufw allow out on wlan0 to 162.159.197.0/24 port 443 proto udp
sudo ufw allow out on wlan0 to 2606:4700:102::/48 port 443 proto udp

sudo ufw deny out on wlan0
sudo ufw deny in on wlan0

My goal is to not have any dns leaks. When warp-cli is connected and ufw is disabled I get Cloudflare and Google servers from dnsleaktest.com