Install, Configure & Monitor Uncomplicated Firewall (UFW) on Ubuntu
From RZWiki
This article briefly demonstrates how to install, configure and monitor the Uncomplicated FireWall (UFW) on Ubuntu Linux platforms, from the CLI;
UFW is a simplified command line (terminal/shell) based front-end to iptables/netfilter.
A GUI, GUFW is now available.
Contents |
Installation
apt-get install ufw
Configuration
ufw enable|disable
ufw logging on|off
ufw default allow|deny
ufw allow|deny [service]
ufw allow proto udp 192.168.0.1 port 53 to 192.168.0.2 port 53 -
Allow port 53
$ sudo ufw allow 53
Delete Allow port 53
$ sudo ufw delete allow 53
Allow port 80
$ sudo ufw allow 80/tcp
Delete Allow port 80
$ sudo ufw delete allow 80/tcp
Allow port smtp
$ sudo ufw allow smtp
Delete Allow port smtp
$ sudo ufw delete allow smtp
Allow fro Particular IP
$ sudo ufw allow from 192.168.254.254
Delete the above rule
$ sudo ufw delete allow from 192.168.254.254
Monitor Status
ufw status
Linux Usage Notes
With most Linux or Unix commands;
- Non root users may need to prefix commands with the sudo command, for example: sudo chmod 644 *
- Brief help can be displayed using the -h or --help parameter, for example: chmod --help
- A full command manual can be displayed using the man command followed by the command name, for example: man chmod
- Sometimes 'info' pages are used instead of or to provide more information than man pages; for example: info chmod
- Version information can normally be display using the -v, -V or --version parameter, for example: chmod --version. However, this paramater is also frequently used to display verbose output.
noinclude/noinclude
Related Files
The ufw executable is normally found here: XXX
Related Commands
Related Articles
Information on other Linux commands 
Information on F5 BigIP commands 
Information on Cisco commands 
Information on Vyatta commands 
Information on Extreme commands 
Information on Zebra commands
Information on Secure Platform commands
Information on Blue Coat SGOS commands
Information on Nokia IPSO commands
 We really do appreciate all feedback so please do send your comments, suggestions or corrections to sjiveson#routerzone.eu
(replacing the # with an @) |
