title: Can't access port 80, 443, 5432 from ec2 aws even though fully set up
body: <p>I am new to aws and created an EC2 instance to start migrating my source code from DigitalOcean. The problem is that I can't access any open ports on my EC2 other than port 22 through the ssh client. Here are some of my configurations. Do I need to restart ec2 to make these changes ? Thanks for the help.</p>
  <ul>
  <li>EC2 inbound rule:</li>
  </ul>
  <pre><code>sgr-id  5432    TCP 0.0.0.0/0   launch-wizard-2
  sgr-id  80  TCP 0.0.0.0/0   launch-wizard-2
  sgr-id  22  TCP 0.0.0.0/0   launch-wizard-2
  sgr-id  443 TCP 0.0.0.0/0   launch-wizard-2
  </code></pre>
  <ul>
  <li>EC2 outbound rule:</li>
  </ul>
  <pre><code>sgr-id  All All 0.0.0.0/0   launch-wizard-2
  </code></pre>
  <ul>
  <li>My EC2 instance:</li>
  </ul>
  <pre><code>$ sudo ufw status 
  
  Status: active
  
  To                         Action      From
  --                         ------      ----
  80/tcp                     ALLOW       Anywhere                  
  443/tcp                    ALLOW       Anywhere                  
  22/tcp                     ALLOW       Anywhere                  
  5432/tcp                   ALLOW       Anywhere                  
  80/tcp (v6)                ALLOW       Anywhere (v6)             
  443/tcp (v6)               ALLOW       Anywhere (v6)             
  22/tcp (v6)                ALLOW       Anywhere (v6)             
  5432/tcp (v6)              ALLOW       Anywhere (v6)
  </code></pre>
  <pre><code>$ sudo iptables -L
  
  Chain INPUT (policy DROP)
  target     prot opt source               destination         
  ufw-before-logging-input  all  --  anywhere             anywhere            
  ufw-before-input  all  --  anywhere             anywhere            
  ufw-after-input  all  --  anywhere             anywhere            
  ufw-after-logging-input  all  --  anywhere             anywhere            
  ufw-reject-input  all  --  anywhere             anywhere            
  ufw-track-input  all  --  anywhere             anywhere            
  ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
  ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
  ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
  
  Chain FORWARD (policy DROP)
  target     prot opt source               destination         
  DOCKER-USER  all  --  anywhere             anywhere            
  DOCKER-ISOLATION-STAGE-1  all  --  anywhere             anywhere            
  ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
  DOCKER     all  --  anywhere             anywhere            
  ACCEPT     all  --  anywhere             anywhere            
  ACCEPT     all  --  anywhere             anywhere            
  ufw-before-logging-forward  all  --  anywhere             anywhere            
  ufw-before-forward  all  --  anywhere             anywhere            
  ufw-after-forward  all  --  anywhere             anywhere            
  ufw-after-logging-forward  all  --  anywhere             anywhere            
  ufw-reject-forward  all  --  anywhere             anywhere            
  ufw-track-forward  all  --  anywhere             anywhere            
  
  Chain OUTPUT (policy ACCEPT)
  target     prot opt source               destination         
  ufw-before-logging-output  all  --  anywhere             anywhere            
  ufw-before-output  all  --  anywhere             anywhere            
  ufw-after-output  all  --  anywhere             anywhere            
  ufw-after-logging-output  all  --  anywhere             anywhere            
  ufw-reject-output  all  --  anywhere             anywhere            
  ufw-track-output  all  --  anywhere             anywhere            
  
  Chain DOCKER (1 references)
  target     prot opt source               destination         
  
  Chain DOCKER-ISOLATION-STAGE-1 (1 references)
  target     prot opt source               destination         
  DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere            
  RETURN     all  --  anywhere             anywhere            
  
  Chain DOCKER-ISOLATION-STAGE-2 (1 references)
  target     prot opt source               destination         
  DROP       all  --  anywhere             anywhere            
  RETURN     all  --  anywhere             anywhere            
  
  Chain DOCKER-USER (1 references)
  target     prot opt source               destination         
  RETURN     all  --  anywhere             anywhere            
  
  Chain ufw-after-forward (1 references)
  target     prot opt source               destination         
  
  Chain ufw-after-input (1 references)
  target     prot opt source               destination         
  ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:netbios-ns
  ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:netbios-dgm
  ufw-skip-to-policy-input  tcp  --  anywhere             anywhere             tcp dpt:netbios-ssn
  ufw-skip-to-policy-input  tcp  --  anywhere             anywhere             tcp dpt:microsoft-ds
  ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:bootps
  ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:bootpc
  ufw-skip-to-policy-input  all  --  anywhere             anywhere             ADDRTYPE match dst-type BROADCAST
  
  Chain ufw-after-logging-forward (1 references)
  target     prot opt source               destination         
  LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix &quot;[UFW BLOCK] &quot;
  
  Chain ufw-after-logging-input (1 references)
  target     prot opt source               destination         
  LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix &quot;[UFW BLOCK] &quot;
  
  Chain ufw-after-logging-output (1 references)
  target     prot opt source               destination         
  
  Chain ufw-after-output (1 references)
  target     prot opt source               destination         
  
  Chain ufw-before-forward (1 references)
  target     prot opt source               destination         
  ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
  ACCEPT     icmp --  anywhere             anywhere             icmp destination-unreachable
  ACCEPT     icmp --  anywhere             anywhere             icmp time-exceeded
  ACCEPT     icmp --  anywhere             anywhere             icmp parameter-problem
  ACCEPT     icmp --  anywhere             anywhere             icmp echo-request
  ufw-user-forward  all  --  anywhere             anywhere            
  
  Chain ufw-before-input (1 references)
  target     prot opt source               destination         
  ACCEPT     all  --  anywhere             anywhere            
  ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
  ufw-logging-deny  all  --  anywhere             anywhere             ctstate INVALID
  DROP       all  --  anywhere             anywhere             ctstate INVALID
  ACCEPT     icmp --  anywhere             anywhere             icmp destination-unreachable
  ACCEPT     icmp --  anywhere             anywhere             icmp time-exceeded
  ACCEPT     icmp --  anywhere             anywhere             icmp parameter-problem
  ACCEPT     icmp --  anywhere             anywhere             icmp echo-request
  ACCEPT     udp  --  anywhere             anywhere             udp spt:bootps dpt:bootpc
  ufw-not-local  all  --  anywhere             anywhere            
  ACCEPT     udp  --  anywhere             224.0.0.251          udp dpt:mdns
  ACCEPT     udp  --  anywhere             239.255.255.250      udp dpt:1900
  ufw-user-input  all  --  anywhere             anywhere            
  
  Chain ufw-before-logging-forward (1 references)
  target     prot opt source               destination         
  
  Chain ufw-before-logging-input (1 references)
  target     prot opt source               destination         
  
  Chain ufw-before-logging-output (1 references)
  target     prot opt source               destination         
  
  Chain ufw-before-output (1 references)
  target     prot opt source               destination         
  ACCEPT     all  --  anywhere             anywhere            
  ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
  ufw-user-output  all  --  anywhere             anywhere            
  
  Chain ufw-logging-allow (0 references)
  target     prot opt source               destination         
  LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix &quot;[UFW ALLOW] &quot;
  
  Chain ufw-logging-deny (2 references)
  target     prot opt source               destination         
  RETURN     all  --  anywhere             anywhere             ctstate INVALID limit: avg 3/min burst 10
  LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix &quot;[UFW BLOCK] &quot;
  
  Chain ufw-not-local (1 references)
  target     prot opt source               destination         
  RETURN     all  --  anywhere             anywhere             ADDRTYPE match dst-type LOCAL
  RETURN     all  --  anywhere             anywhere             ADDRTYPE match dst-type MULTICAST
  RETURN     all  --  anywhere             anywhere             ADDRTYPE match dst-type BROADCAST
  ufw-logging-deny  all  --  anywhere             anywhere             limit: avg 3/min burst 10
  DROP       all  --  anywhere             anywhere            
  
  Chain ufw-reject-forward (1 references)
  target     prot opt source               destination         
  
  Chain ufw-reject-input (1 references)
  target     prot opt source               destination         
  
  Chain ufw-reject-output (1 references)
  target     prot opt source               destination         
  
  Chain ufw-skip-to-policy-forward (0 references)
  target     prot opt source               destination         
  DROP       all  --  anywhere             anywhere            
  
  Chain ufw-skip-to-policy-input (7 references)
  target     prot opt source               destination         
  DROP       all  --  anywhere             anywhere            
  
  Chain ufw-skip-to-policy-output (0 references)
  target     prot opt source               destination         
  ACCEPT     all  --  anywhere             anywhere            
  
  Chain ufw-track-forward (1 references)
  target     prot opt source               destination         
  
  Chain ufw-track-input (1 references)
  target     prot opt source               destination         
  
  Chain ufw-track-output (1 references)
  target     prot opt source               destination         
  ACCEPT     tcp  --  anywhere             anywhere             ctstate NEW
  ACCEPT     udp  --  anywhere             anywhere             ctstate NEW
  
  Chain ufw-user-forward (1 references)
  target     prot opt source               destination         
  
  Chain ufw-user-input (1 references)
  target     prot opt source               destination         
  ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
  ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:https
  ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ssh
  ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:postgresql
  
  Chain ufw-user-limit (0 references)
  target     prot opt source               destination         
  LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 5 LOG level warning prefix &quot;[UFW LIMIT BLOCK] &quot;
  REJECT     all  --  anywhere             anywhere             reject-with icmp-port-unreachable
  
  Chain ufw-user-limit-accept (0 references)
  target     prot opt source               destination         
  ACCEPT     all  --  anywhere             anywhere            
  
  Chain ufw-user-logging-forward (0 references)
  target     prot opt source               destination         
  
  Chain ufw-user-logging-input (0 references)
  target     prot opt source               destination         
  
  Chain ufw-user-logging-output (0 references)
  target     prot opt source               destination         
  
  Chain ufw-user-output (1 references)
  target     prot opt source               destination
  </code></pre>
  <ul>
  <li>netstat punta</li>
  </ul>
  <pre><code>Active Internet connections (servers and established)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
  tcp        0      0 127.0.0.1:45113         0.0.0.0:*               LISTEN      513/containerd      
  tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      443/systemd-resolve 
  tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      809/sshd: /usr/sbin 
  tcp        0    196 172.31.29.28:22         3.0.5.36:51297          ESTABLISHED 1869/sshd: ubuntu [ 
  tcp6       0      0 :::22                   :::*                    LISTEN      809/sshd: /usr/sbin 
  udp        0      0 127.0.0.53:53           0.0.0.0:*                           443/systemd-resolve 
  udp        0      0 172.31.29.28:68         0.0.0.0:*                           440/systemd-network
  </code></pre>