diff --git a/harden b/harden
index aa56ee4..abfd15a 100755
--- a/harden
+++ b/harden
@@ -588,7 +588,10 @@ if [[ -n "$OLD_PORTS" ]]; then
         # Deny the port in the firewall
         case "$currentFirewall" in
             ufw)
-                sudo ufw deny "$port"/tcp
+            PORT_RULE_NUMS="$(sudo ufw status numbered | grep -i "$port" | grep -oP '\[.*?\]' | grep -o '[0-9]')"
+                for PORT_RULE_NUM in ${PORT_RULE_NUMS[@]}; do
+                    yes | sudo ufw delete "$PORT_RULE_NUM"
+                done
             ;;
             firewalld)
                 sudo firewall-cmd --permanent --remove-port="$port"/tcp