I'm going to compose an answer here for documentation purposes. Ubuntu already does this for you out of the box. If you aren't using Ubuntu and ufw isn't the default firewall, then in addition to enabling ufw (despite terminal saying after enabling it that it is enabled on startup this isn't true if ufw isn't a startup app) you will need to add ufw to startup apps. You can check the status and rules of UFW using the following command: sudo ufw status The way VPNs where meant to be appearing (natively integrated with a fail-safe). Using Linux with this fail-safe and network manager GUI for OpenVPN and it works absolutely flawlessly. By default UFW will start up when Ubuntu does so as long as you set it to enabled you have a fail-safe activated from startup and you'll never need to touch it. Ideally you would want to only enable desired traffic on tun0 as currently tun0 is DMZed, but that's up to you.

Replace 109.201.128.0 in the above command with the IP of your VPN. sudo ufw allow out from any to 109.201.128.0 But it's really annoying to need to turn firewall on and off each time we want to connect to a VPN, so we'll add an exception for establishing the initial connection to the VPN server. So now all traffic is allowed on VPN and no traffic is allowed without VPN. So add it if you want: sudo ufw allow in on tun0 from any to any

Now security-wise you don't need to allow incoming traffic to use the internet, but you may want to require it (for example for seeding torrents this is necessary). If you are using OpenVPN and TUN as network adapter (you most probably are) then we call the network interface as tun0.Īllow outgoing traffic on tun0: sudo ufw allow out on tun0 from any to any Now we want to make it so there is an exception for VPN. sudo ufw default deny outgoingĭo this for incoming also: sudo ufw default deny incoming Now we are going to block all traffic on the computer.

) you'll need to resolve the URL to find IP address (since we are going to block DNS requests that don't go over VPN). ovpn for the PureVPN server you want to add find the IP address of the server you are connecting to. UFW is the default firewall in Ubuntu, so it is already installed, no need doing that, and should already be set to launch at startup. Ignore IP tables makes things complicated.

Purevpn app not working