Uncomplicated Firewall

Last updated
Uncomplicated Firewall
Stable release
0.36-7 [1] / October 22, 2020;3 years ago (2020-10-22)
Repository
Written in Python
Operating system Linux
License GNU General Public License
Website launchpad.net/ufw , manpages.ubuntu.com/manpages/bionic/en/man8/ufw.8.html

Uncomplicated Firewall (UFW) is a program for managing a netfilter firewall designed to be easy to use. It uses a command-line interface consisting of a small number of simple commands, and uses iptables for configuration. UFW is available by default in all Ubuntu installations since 8.04 LTS. [1] UFW has been available by default in all Debian installations since 10.

Contents

GUIs for Uncomplicated Firewall

Gufw (GUI for Uncomplicated Firewall)
Original author(s) Gufw Developers
Stable release
Repository
Written in Python, PyGObject
Operating system Linux
Platform GTK
Available in More languages
License GNU General Public License
Website gufw.org
kmyfirewall
Developer(s) KLajos et al.
Repository
Operating system Linux
Platform Qt
License GNU General Public License
Website launchpad.net/ufw   OOjs UI icon edit-ltr-progressive.svg
UFW KControl Module
Repository
Operating system Linux
Platform Qt
License GNU General Public License
Website www.linux-apps.com
UFW Frontends
Original author(s) Darwin Bautista
Stable release
0.3.2 / 2012;11 years ago (2012)
Repository
Written in Python, PyGTK
Operating system Linux
Platform PyGTK
License GNU General Public License
Website github.com/baudm/ufw-frontends

Gufw is intended to be an easy, intuitive graphical user interface for managing Uncomplicated Firewall. It supports common tasks such as allowing or blocking pre-configured, common P2P, or individual ports. Gufw has been designed for Ubuntu, but is also available in Debian-based distributions and in Arch Linux; anywhere Python, GTK and UFW are available.

Features

Netfilter feature [2] 0.16.2
(8.04 LTS)
0.30
(10.04 LTS)
0.31.1-1
(12.04 LTS)
0.34-0
(14.04 LTS)
0.35-0
(16.04 LTS)
Default incoming policy (allow/deny)YesYesYesYesYes
Allow/deny incoming rulesYesYesYesYesYes
IPv6YesYesYesYesYes
StatusYesYesYesYesYes
Logging (on/off)YesYesYesYesYes
Extensible frameworkYesYesYesYesYes
Application integrationYesYesYesYes
Limit incoming rules (rate limiting)YesYesYesYes
Multiport incoming rulesYesYesYesYes
debconf/preseedingYesYesYesYes
Default incoming policy (reject)YesYesYesYes
Reject incoming rulesYesYesYesYes
Rule insertionYesYesYesYes
Log levelsYesYesYesYes
Per rule loggingYesYesYesYes
Outgoing filtering (on par with incoming)YesYesYesYes
Filtering by interfaceYesYesYesYes
Bash completionYesYesYesYes
Upstart supportYesYesYesYes
Improved reportingYesYesYesYes
Reset commandYesYesYesYes
rsyslog supportYesYesYesYes
Delete by rule numberYesYesYesYes
Python 2.6 supportYesYesYes
'show listening' reportYesYesYes
Python 2.7 supportYesYesYes
Increased protocol support (AH, ESP)YesYesYes
IPv6 rate limiting via 'limit' commandYesYes
Python 3.2 supportYesYes
Python 3.3 supportYesYes
'show added' reportYesYes
Python 3.4 supportYesYes
Before/after extensibility hooksYesYes
Routed packet filtering (FORWARD)YesYes
systemd supportYes
Increased protocol support (IGMP, GRE)Yes
Python 3.5 supportYes
Snappy for Ubuntu Core supportYes
Per rule commentsYes

Related Research Articles

<span class="mw-page-title-main">Debian</span> Linux distribution based on free and open-source software

Debian, also known as Debian GNU/Linux, is a Linux distribution composed of free and open-source software developed by the community-supported Debian Project, which was established by Ian Murdock on August 16, 1993. The first version of Debian (0.01) was released on September 15, 1993, and its first stable version (1.1) was released on June 17, 1996. The Debian Stable branch is the most popular edition for personal computers and servers. Debian is also the basis for many other distributions, like PureOS, Ubuntu, Pardus, and Linux Mint.

<span class="mw-page-title-main">APT (software)</span> Free software package management system

Advanced package tool, or APT, is a free-software user interface that works with core libraries to handle the installation and removal of software on Debian, and Debian-based Linux distributions. APT simplifies the process of managing software on Unix-like computer systems by automating the retrieval, configuration and installation of software packages, either from precompiled files or by compiling source code.

Unix security refers to the means of securing a Unix or Unix-like operating system. A secure environment is achieved not only by the design concepts of these operating systems, but also through vigilant user and administrative practices.

<span class="mw-page-title-main">Synaptic (software)</span> Gtk GUI front end for APT package manager

Synaptic is a GTK-based graphical user interface for the APT package manager used by the Debian Linux distribution and its derivatives. Synaptic is usually used on systems based on deb packages but can also be used on systems based on RPM packages. It can be used to install, remove and upgrade software packages and to add repositories.

<span class="mw-page-title-main">Ubuntu</span> Linux distribution developed by Canonical

Ubuntu is a Linux distribution based on Debian and composed mostly of free and open-source software. Ubuntu is officially released in multiple editions: Desktop, Server, and Core for Internet of things devices and robots. The operating system is developed by the British company Canonical, and a community of other developers, under a meritocratic governance model. As of October 2023, the most-recent release is 23.10, and the current long-term support release is 22.04.

<span class="mw-page-title-main">Webmin</span> Web-based control panel for Unix-like systems

Webmin is a web-based server management control panel for Unix-like systems. Webmin allows the user to configure operating system internals, such as users, disk quotas, services and configuration files, as well as modify and control open-source apps, such as BIND, Apache HTTP Server, PHP, and MySQL.

<span class="mw-page-title-main">Jigdo</span> Software

Jigdo is a utility typically used for downloading to piece together a large file, most commonly an optical disk image such as a CD, DVD or Blu-ray Disc (BD) image, from many smaller individual constituent files. The constituent files may be local and/or retrieved from one or more mirror sites. Jigdo's features are similar to BitTorrent, but unlike BitTorrent, Jigdo uses a client-server model, not peer-to-peer.

<span class="mw-page-title-main">Firestarter (firewall)</span> Personal firewall

Firestarter is a personal firewall tool that uses the Netfilter (iptables/ipchains) system built into the Linux kernel. It has the ability to control both inbound and outbound connections. Firestarter provides a graphical interface for configuring firewall rules and settings. It provides real-time monitoring of all network traffic for the system. Firestarter also provides facilities for port forwarding, internet connection sharing and DHCP service.

<span class="mw-page-title-main">Compiz</span> Compositing window manager for the X Window System

Compiz is a compositing window manager for the X Window System, using 3D graphics hardware to create fast compositing desktop effects for window management. Effects, such as a minimization animation or a cube workspace, are implemented as loadable plugins. Because it conforms to the ICCCM conventions, Compiz can be used as a substitute for the default Mutter or Metacity, when using GNOME Panel, or KWin in KDE Plasma Workspaces. Internally Compiz uses the OpenGL library as the interface to the graphics hardware.

<span class="mw-page-title-main">PulseAudio</span> Sound server for Unix-like operating systems

PulseAudio is a network-capable sound server program distributed via the freedesktop.org project. It runs mainly on Linux, including Windows Subsystem for Linux on Microsoft Windows and Termux on Android; various BSD distributions such as FreeBSD, OpenBSD, and macOS; as well as Illumos distributions and the Solaris operating system. It serves as a middleware in between applications and hardware and handles raw PCM audio streams.

<span class="mw-page-title-main">Linux Mint</span> Ubuntu-based Linux distribution

Linux Mint is a community-driven Linux distribution based on Ubuntu, bundled with a variety of free and open-source applications. It can provide full out-of-the-box multimedia support for those who choose to include proprietary software such as multimedia codecs. Compared to Ubuntu, it uses the Cinnamon interface by default, using a different, more traditional layout that can be customized by dragging the applets and creating panels. New applets can also be downloaded.

<span class="mw-page-title-main">WeeChat</span> IRC client

WeeChat is a free and open-source Internet Relay Chat client that is designed to be light and fast. It is released under the terms of the GNU GPL-3.0-or-later and has been developed since 2003.

nftables is a subsystem of the Linux kernel providing filtering and classification of network packets/datagrams/frames. It has been available since Linux kernel 3.13 released on 19 January 2014.

<span class="mw-page-title-main">Peppermint OS</span> Linux computer operating system

Peppermint OS is a Linux distribution based on Debian and Devuan Stable, and formerly based on Ubuntu. It uses the Xfce desktop environment. It aims to provide a familiar environment for newcomers to Linux, which requires relatively low hardware resources to run.

<span class="mw-page-title-main">Guvcview</span> Free and open source webcam application

Guvcview is a webcam application, i.e. software to handle UVC streams, for the Linux desktop, started by Paulo Assis in 2008. The application is written in C and is free and open-source software released under GPL-2.0-or-later.

firewalld is a firewall management tool for Linux operating systems. It provides firewall features by acting as a front-end for the Linux kernel's netfilter framework. firewalld's current default backend is nftables. Prior to v0.6.0, iptables was the default backend. Through its abstractions, firewalld acts as an alternative to nft and iptables command line programs. The name firewalld adheres to the Unix convention of naming system daemons by appending the letter "d".

<span class="mw-page-title-main">Zorin OS</span> Linux distribution based on Ubuntu LTS

Zorin OS is a Linux distribution based on Ubuntu. It uses a GNOME 3 and XFCE 4 desktop environment by default, although the desktop is heavily customized in order to help users transition from Windows and macOS easily. Wine and PlayOnLinux are supported, allowing users to run compatible Windows software, like Microsoft Office. Its creators maintain three free editions of the operating system, and sell a professional edition.

<span class="mw-page-title-main">Windows Subsystem for Linux</span> Compatibility layer for running Linux binary executables natively on Windows

Windows Subsystem for Linux (WSL) is a feature of Windows that allows developers to run a Linux environment without the need for a separate virtual machine or dual booting. There are two versions of WSL: WSL 1 and WSL 2. WSL 1 was first released on August 2, 2016, and acts as a compatibility layer for running Linux binary executables by implementing Linux system calls on the Windows kernel. It is available on Windows 10, Windows 10 LTSB/LTSC, Windows 11, Windows Server 2016, Windows Server 2019 and Windows Server 2022.

Ubuntu is a Debian-based Linux distribution for personal computers, tablets and smartphones, where the Ubuntu Touch edition is used; and also runs network servers, usually with the Ubuntu Server edition, either on physical or virtual servers or with containers, that is with enterprise-class features.

References

  1. 1 2 "UncomplicatedFirewall". Ubuntu. Retrieved 26 December 2019.
  2. "UFW in Ubuntu". Ubuntu. Retrieved 21 November 2016.