Page 3 of 5 FirstFirst 12345 LastLast
Results 21 to 30 of 47

Thread: A question regarding ufw

  1. #21
    Join Date
    Mar 2011
    Beans
    669

    Re: A question regarding ufw

    Switching connections shouldn't change anything.

  2. #22
    Join Date
    Sep 2007
    Location
    Oklahoma, USA
    Beans
    2,166
    Distro
    Xubuntu 12.04 Precise Pangolin

    Re: A question regarding ufw

    Quote Originally Posted by jsvidyad View Post
    Do the firewall rules set up by ufw depend on the kind of network interface used for the network connection in any way?
    They can, but don't have to. It depends entirely on how each specific rule is written.

    That is, a rule can be specified as applying to just one specific network interface, and if that's done the rule will be ignored for all other interfaces. However in the absence of such a specification, it will apply to all of them.

    You would have to examine the rules that UFW generated for your system to determine which is the case; UFW lets you do it either way.
    --
    Jim Kyle in Oklahoma, USA
    Linux Counter #259718
    Howto mark thread: https://wiki.ubuntu.com/UnansweredPo.../SolvedThreads

  3. #23
    Join Date
    Sep 2011
    Beans
    1,531

    Re: A question regarding ufw

    So unless you specify a particular network interface, then the default for ufw, gufw, and iptables is to apply to all interfaces, correct?

  4. #24
    Join Date
    Jun 2011
    Location
    The Shadow Gallery
    Beans
    6,803

    Re: A question regarding ufw

    Quote Originally Posted by Ms. Daisy View Post
    So unless you specify a particular network interface, then the default for ufw, gufw, and iptables is to apply to all interfaces, correct?
    from the man page:

    By default, ufw will apply rules to all available interfaces. To limit this, specify DIRECTION on INTERFACE, where DIRECTION is one of in or out (interface aliases are not supported). For example, to allow all new incoming http connections on eth0, use: ufw allow in on eth0 to any port 80 proto tcp
    Feel Free to Bitcoin Tip: 135Rp4pwwYTHEJ4u8bxKaDQiC91N9LUoV2

    Backtrack - Giving machine guns to monkeys since 2006
    Kali-Linux - Adding a grenade launcher to the machine guns since 2013

  5. #25
    Join Date
    Sep 2007
    Location
    Oklahoma, USA
    Beans
    2,166
    Distro
    Xubuntu 12.04 Precise Pangolin

    Re: A question regarding ufw

    And for iptables itself, it's the "-i" and "-o" options in each rule. Most of the time an interface is specified, but not always. If not, the rule applies to all of them.
    --
    Jim Kyle in Oklahoma, USA
    Linux Counter #259718
    Howto mark thread: https://wiki.ubuntu.com/UnansweredPo.../SolvedThreads

  6. #26
    Join Date
    Jul 2005
    Beans
    412

    Re: A question regarding ufw

    Hello,

    I usually set up ufw with the default rules of incoming:deny and outgoing:allow. Now, I know that these ufw default firewall settings (when ufw is enabled) protect my computer when I'm connected to the internet via a wired connection since I have used these default ufw settings on desktops running ubuntu which have wired connections to the internet and ufw is set up and enabled on those desktops. Is the working of the above default ufw settings dependent on the network interface used for internet access? I plan to install ubuntu on a laptop and use the laptop's wireless interface to connect to wireless networks. Will the above mentioned default ufw settings for the ufw firewall work for the wireless interface of my laptop too? Will the ufw firewall with the above mentioned default ufw settings work to protect my laptop while my laptop is connected via a wireless connection to the internet using my laptop's wireless interface?

  7. #27
    Join Date
    Jun 2011
    Location
    The Shadow Gallery
    Beans
    6,803

    Re: A question regarding ufw

    Quote Originally Posted by jsvidyad View Post
    Hello,

    I usually set up ufw with the default rules of incoming:deny and outgoing:allow. Now, I know that these ufw default firewall settings (when ufw is enabled) protect my computer when I'm connected to the internet via a wired connection since I have used these default ufw settings on desktops running ubuntu which have wired connections to the internet and ufw is set up and enabled on those desktops. Is the working of the above default ufw settings dependent on the network interface used for internet access? I plan to install ubuntu on a laptop and use the laptop's wireless interface to connect to wireless networks. Will the above mentioned default ufw settings for the ufw firewall work for the wireless interface of my laptop too? Will the ufw firewall with the above mentioned default ufw settings work to protect my laptop while my laptop is connected via a wireless connection to the internet using my laptop's wireless interface?
    2 posts above, post #24
    Feel Free to Bitcoin Tip: 135Rp4pwwYTHEJ4u8bxKaDQiC91N9LUoV2

    Backtrack - Giving machine guns to monkeys since 2006
    Kali-Linux - Adding a grenade launcher to the machine guns since 2013

  8. #28
    Join Date
    Jul 2005
    Beans
    412

    Re: A question regarding ufw

    When I set the default incoming rule to deny and the default outgoing rule to allow, I don't specify any network interface. So, those settings should work for any network interface(more specifically the ethernet wired interface and the wireless interface) and the ufw firewall will protect my computer irrespective of which network interface I am using to connect to the internet, right?

    I was using firestarter till like 2 years ago and in firestarter, when I configure firestarter, I had to specify which network interface was connected to the internet and the rules were set only for that interface. If I later started using another network interface to connect to the internet, I had to re-configure firestarter and specify the new network interface as the internet connected network device. If I didn't do that, the firestarter firewall would become inactive and wouldn't protect my computer. Now, when setting up and configuring the ufw firewall, I didn't have to specify any network interface as the internet connected network device. So, I wasn't sure if my settings for ufw were were valid and whether ufw was active and protecting my computer when I use any one of the different network interfaces available to connect to the internet, irrespective of which network interface I was using to connect to the internet. More specifically, I wasn't sure if my ufw firewall was active and protecting my computer no matter whether I was using the ethernet wired interface or the wireless interface as the internet connected device in order to connect to the internet. Also, I wasn't sure(I still am not) if I had to re-configure the ufw firewall when I switched from using one network interface to another network interface in order to connect to the internet.

  9. #29
    Join Date
    Jun 2011
    Location
    The Shadow Gallery
    Beans
    6,803

    Re: A question regarding ufw

    Quote Originally Posted by jsvidyad View Post
    When I set the default incoming rule to deny and the default outgoing rule to allow, I don't specify any network interface. So, those settings should work for any network interface(more specifically the ethernet wired interface and the wireless interface) and the ufw firewall will protect my computer irrespective of which network interface I am using to connect to the internet, right?

    I was using firestarter till like 2 years ago and in firestarter, when I configure firestarter, I had to specify which network interface was connected to the internet and the rules were set only for that interface. If I later started using another network interface to connect to the internet, I had to re-configure firestarter and specify the new network interface as the internet connected network device. If I didn't do that, the firestarter firewall would become inactive and wouldn't protect my computer. Now, when setting up and configuring the ufw firewall, I didn't have to specify any network interface as the internet connected network device. So, I wasn't sure if my settings for ufw were were valid and whether ufw was active and protecting my computer when I use any one of the different network interfaces available to connect to the internet, irrespective of which network interface I was using to connect to the internet. More specifically, I wasn't sure if my ufw firewall was active and protecting my computer no matter whether I was using the ethernet wired interface or the wireless interface as the internet connected device in order to connect to the internet. Also, I wasn't sure(I still am not) if I had to re-configure the ufw firewall when I switched from using one network interface to another network interface in order to connect to the internet.
    From post #24

    By default, ufw will apply rules to all available interfaces.
    Firestarter is out of date and buggy.

    Code:
    sudo ufw status
    will tell you if its active
    Feel Free to Bitcoin Tip: 135Rp4pwwYTHEJ4u8bxKaDQiC91N9LUoV2

    Backtrack - Giving machine guns to monkeys since 2006
    Kali-Linux - Adding a grenade launcher to the machine guns since 2013

  10. #30
    Join Date
    Jul 2005
    Beans
    412

    Re: A question regarding ufw

    When I set the ufw default rules as incoming:deny and outgoing:allow(i.e. deny incoming connections and allow outgoing connections), I do not specify any network interface. So, those default rules should apply to all interfaces, right? When the above default rules are set for the ufw firewall and the ufw firewall has been enabled on my computer, the ufw firewall will be active and protecting my computer irrespective of which network interface I'm using to connect to the internet, right? More specifically, after setting the above default rules and enabling the ufw firewall on my laptop, the ufw firewall will apply those default rules and protect my laptop irrespective of whether I use the wired ethernet interface on my laptop or the wireless interface of my laptop to connect my laptop to the internet, right?

Page 3 of 5 FirstFirst 12345 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •