Uncomplicated Firewall

Last updated
Uncomplicated Firewall
Developer(s) Canonical Ltd.
Stable release
0.36.2 [1] / May 18, 2023;19 months ago (2023-05-18)
Repository
Written in Python
Operating system Linux
License GNU General Public License
Website launchpad.net/ufw , manpages.ubuntu.com/manpages/bionic/en/man8/ufw.8.html

Uncomplicated Firewall (UFW) is a program for managing a netfilter firewall designed to be easy to use. It uses a command-line interface consisting of a small number of simple commands, and uses iptables for configuration. UFW is available by default in all Ubuntu installations since 8.04 LTS. [1] UFW has been available by default in all Debian installations since 10.

Contents

GUIs for Uncomplicated Firewall

Gufw (GUI for Uncomplicated Firewall)
Original author(s) Gufw Developers
Stable release
Repository
Written in Python, PyGObject
Operating system Linux
Platform GTK
Available in More languages
License GNU General Public License
kmyfirewall
Developer(s) KLajos et al.
Repository
Operating system Linux
Platform Qt
License GNU General Public License
UFW KControl Module
Repository
Operating system Linux
Platform Qt
License GNU General Public License
Website www.linux-apps.com
UFW Frontends
Original author(s) Darwin Bautista
Stable release
0.3.2 / 2012;13 years ago (2012)
Repository
Written in Python, PyGTK
Operating system Linux
Platform PyGTK
License GNU General Public License
Website github.com/baudm/ufw-frontends

Gufw is intended to be an easy, intuitive graphical user interface for managing Uncomplicated Firewall. It supports common tasks such as allowing or blocking pre-configured, common P2P, or individual ports. Gufw has been designed for Ubuntu, but is also available in Debian-based distributions and in Arch Linux; anywhere Python, GTK and UFW are available.

Features

Netfilter feature [2] 0.31.1-10.34~rc-0ubuntu20.34-20.35
Default incoming policy (allow/deny)YesYesYesYes
Allow/deny incoming rulesYesYesYesYes
IPv6 (by default)YesYesYesYes
StatusYesYesYesYes
Logging (on/off)YesYesYesYes
Extensible frameworkYesYesYesYes
Python 2.5 supportYesNoNoNo
Application integrationYesYesYesYes
IPv4 rate limiting via 'limit' commandYesYesYesYes
InternationalizationYesYesYesYes
Multiport incoming rulesYesYesYesYes
debconf/preseedingYesYesYesYes
Default incoming policy (reject)YesYesYesYes
Reject incoming rulesYesYesYesYes
Rule insertionYesYesYesYes
Log levelsYesYesYesYes
Per rule loggingYesYesYesYes
Outgoing filtering (on par with incoming)YesYesYesYes
Filtering by interfaceYesYesYesYes
Bash completionYesYesYesYes
Upstart supportYesYesYesYes
Improved reportingYesYesYesYes
Reset commandYesYesYesYes
rsyslog supportYesYesYesYes
Delete by rule numberYesYesYesYes
Python 2.6 supportYesYesYesYes
'show listening' reportYesYesYesYes
Python 2.7 supportYesYesYesYes
Increased protocol support (AH, ESP)YesYesYesYes
IPv6 rate limiting via 'limit' commandYesYesYes
Python 3.2 supportYesYesNo
Python 3.3 supportYesYesYes
'show added' reportYesYesYes
Python 3.4 supportYesYesYes
Before/after extensibility hooksYesYesYes
Routed packet filtering (FORWARD)YesYesYes
systemd supportYesYes
Increased protocol support (IGMP, GRE)YesYes
Python 3.5 supportYesYes
Snappy for Ubuntu Core supportYes
Per rule commentsYes

Related Research Articles

<span class="mw-page-title-main">Debian</span> Linux distribution based on free and open-source software

Debian, also known as Debian GNU/Linux, is a free and open source Linux distribution, developed by the Debian Project, which was established by Ian Murdock in August 1993. Debian is one of the oldest operating systems based on the Linux kernel, and is the basis for many other Linux distributions.

<span class="mw-page-title-main">Linux distribution</span> Operating system based on the Linux kernel

A Linux distribution is an operating system that includes the Linux kernel for its kernel functionality. Although the name does not imply product distribution per se, a distro, if distributed on its own, is often obtained via a website intended specifically for the purpose. Distros have been designed for a wide variety of systems ranging from personal computers to servers and from embedded devices to supercomputers.

<span class="mw-page-title-main">APT (software)</span> Free software package management system

Advanced Package Tool, or APT, is a free-software user interface that works with core libraries to handle the installation and removal of software on Debian and Debian-based Linux distributions. APT simplifies the process of managing software on Unix-like computer systems by automating the retrieval, configuration and installation of software packages, either from precompiled files or by compiling source code.

<span class="mw-page-title-main">Ubuntu</span> Linux distribution developed by Canonical

Ubuntu is a Linux distribution derived from Debian and composed mostly of free and open-source software. Ubuntu is officially released in multiple editions: Desktop, Server, and Core for Internet of things devices and robots. The operating system is developed by the British company Canonical and a community of other developers, under a meritocratic governance model. As of October 2024, the latest interim release is 24.10, with most-recent long-term support release is 24.04.

<span class="mw-page-title-main">Webmin</span> Web-based control panel for Unix-like systems

Webmin is a web-based server management control panel for Unix-like systems. Webmin allows the user to configure operating system internals, such as users, disk quotas, services and configuration files, as well as modify and control open-source apps, such as BIND, Apache HTTP Server, PHP, and MySQL.

<span class="mw-page-title-main">Jigdo</span> Software

Jigdo is a utility typically used for downloading to piece together a large file, most commonly an optical disk image such as a CD, DVD or Blu-ray Disc (BD) image, from many smaller individual constituent files. The constituent files may be local and/or retrieved from one or more mirror sites. Jigdo's features are similar to BitTorrent, but unlike BitTorrent, Jigdo uses a client-server model, not peer-to-peer.

<span class="mw-page-title-main">Firestarter (firewall)</span> Personal firewall

Firestarter is a personal firewall tool that uses the Netfilter (iptables/ipchains) system built into the Linux kernel. It has the ability to control both inbound and outbound connections. Firestarter provides a graphical interface for configuring firewall rules and settings. It provides real-time monitoring of all network traffic for the system. Firestarter also provides facilities for port forwarding, internet connection sharing and DHCP service.

<span class="mw-page-title-main">Compiz</span> Compositing window manager for the X Window System

Compiz is a compositing window manager for the X Window System, using 3D graphics hardware to create fast compositing desktop effects for window management. Effects, such as a minimization animation or a cube workspace, are implemented as loadable plugins. Because it conforms to the ICCCM conventions, Compiz can be used as a substitute for the default Mutter or Metacity, when using GNOME Panel, or KWin in KDE Plasma Workspaces. Internally Compiz uses the OpenGL library as the interface to the graphics hardware.

<span class="mw-page-title-main">PulseAudio</span> Sound server for Unix-like operating systems

PulseAudio is a network-capable sound server program distributed via the freedesktop.org project. It runs mainly on Linux, including Windows Subsystem for Linux on Microsoft Windows and Termux on Android; various BSD distributions such as FreeBSD, OpenBSD, and macOS; as well as Illumos distributions and the Solaris operating system. It serves as a middleware in between applications and hardware and handles raw PCM audio streams.

<span class="mw-page-title-main">Linux Mint</span> Ubuntu-based and Debian-based Linux distribution

Linux Mint is a community-developed Linux distribution. It is based on Ubuntu and designed for x86-64 based computers; another variant is based on Debian which is named Linux Mint Debian Edition (LMDE) and has both 64-bit and IA-32 support. The Linux Mint project started in 2006 and it has since become one of the most popular Linux operating systems for desktop PCs.

<span class="mw-page-title-main">Mythbuntu</span> Discontinued media center OS

Mythbuntu is a discontinued media center operating system based on Ubuntu, which integrated the MythTV media center software as its main function, and did not install with all of the programs included with Ubuntu.

<span class="mw-page-title-main">NimbleX</span> Linux distribution

NimbleX is a small Slackware-based Linux distribution optimized to run from a CD, USB drive or a network environment. NimbleX has been praised for how fast it boots, as well as for its small disk footprint, which is considered surprising for a distribution using KDE as desktop environment. NimbleX was also remarked for its website that allows users to generate custom bootable images by using a web browser. It was also covered in mainstream Romanian press as the first Linux distribution put together by a Romanian.

<span class="mw-page-title-main">WeeChat</span> IRC client

WeeChat is a free and open-source Internet Relay Chat client that is designed to be light and fast. It is released under the terms of the GNU GPL-3.0-or-later and has been developed since 2003.

<span class="mw-page-title-main">Peppermint OS</span> Linux computer operating system

Peppermint OS is a Linux distribution based on Debian and Devuan Stable, and formerly based on Ubuntu. It uses the Xfce desktop environment. It aims to provide a familiar environment for newcomers to Linux, which requires relatively low hardware resources to run.

<span class="mw-page-title-main">Redshift (software)</span> Computer display color temperature auto-adjuster

Redshift is an application that adjusts the computer display's color temperature based upon the time of day. The program is free software and is intended to reduce eye strain, as well as insomnia.

<span class="mw-page-title-main">Guvcview</span> Free and open source webcam application

Guvcview is a webcam application, i.e. software to handle UVC streams, for the Linux desktop, started by Paulo Assis in 2008. The application is written in C and is free and open-source software released under GPL-2.0-or-later.

firewalld is a firewall management tool for Linux operating systems. It provides firewall features by acting as a front-end for the Linux kernel's netfilter framework. firewalld's current default backend is nftables. Prior to v0.6.0, iptables was the default backend. Through its abstractions, firewalld acts as an alternative to nft and iptables command line programs. The name firewalld adheres to the Unix convention of naming system daemons by appending the letter "d".

<span class="mw-page-title-main">Windows Subsystem for Linux</span> Feature for a Linux environment in Windows

Windows Subsystem for Linux (WSL) is a feature of Microsoft Windows that allows for using a Linux environment without the need for a separate virtual machine or dual booting. WSL is installed by default in Windows 11. In Windows 10, it can be installed either by joining the Windows Insider program or manually via Microsoft Store or Winget.

Ubuntu is a Debian-based Linux distribution for personal computers, tablets and smartphones, where the Ubuntu Touch edition is used; and also runs network servers, usually with the Ubuntu Server edition, either on physical or virtual servers or with containers, that is with enterprise-class features.

References

  1. 1 2 "UncomplicatedFirewall". Ubuntu. Retrieved 3 December 2024.
  2. "UFW in Ubuntu". Ubuntu. Retrieved 2025-01-06.