How-To: UFW

[InfinityCircuit]

If you are trying to print to a Windows printer shared over samba, you have to make the following changes:

1) Edit /etc/default/ufw and change the last line from:

IPT_MODULES="nf_conntrack_ftp nf_nat_ftp nf_conntrack_irc nf_nat_irc"

To:

IPT_MODULES="nf_conntrack_ftp nf_nat_ftp nf_conntrack_irc nf_nat_irc nf_conntrack_netbios_ns"

2) Create the following rules:

sudo ufw allow proto udp from 192.168.0.0/16 to any port 137
sudo ufw allow proto udp from 192.168.0.0/16 to any port 631

[element_G]

just want to say thanks for this, gufw has failed me and I had to go back to the always reliable cli

[DenKain]

I know the last post in this thread, before me, was in 2007 but I just want to point something out encase anyone ever finds this on google like I did while searching for ufw.

If you want ufw to load on start up do the following:

System > Preferences > Sessions > Startup Programs > Click Add.

Then just type in ufw for the name and the command. (or gufw if you use that)

Then click "Okay" and then click "Close"

There, your finished, its on the startup.

[hostilejosh]

so if ufw (or any other firewall configuration tool) is not loaded you have no firewall?

[ugm6hr]

so if ufw (or any other firewall configuration tool) is not loaded you have no firewall?

No.

iptables is enabled as default. ufw is an optional simplified front-end for iptables.

If you use:`

sudo ufw enable

A reboot will leave ufw enabled.

[edibanez]

Hi, i'm confused about configuring ufw i'm using kubuntu jaunty, i got ssh deny rule on ufw, if i connect on ssh at localhost will the firewall drop my connection or will it still push thru?

[yuli_capone]

I need some help.
I'm trying to open ports for deluge for upload(it say "no incomming connection")
How can i do that?can you explain me step by step?
Thanks!

[nick1]

iptables is enabled as default. ufw is an optional simplified front-end for iptables.

I just installed Ubuntu 8.04.3 LTS desktop version and ran:

sudo iptables -L

which lists all rules in all chains in the default filter table ( source ). This was returned:

Chain INPUT (policy ACCEPT)
target  prot opt source  destination

Chain FORWARD (policy ACCEPT)
target  prot opt source  destination

Chain OUTPUT (policy ACCEPT)
target  prot opt source  destination

It appears that iptables is enabled by default, however, it appears the default firewall rules are allowing all inbound, forwarding, and outbound traffic.

If that is the case, the operating system is wide open to vulnerabilities, especially when first plugging into a public network and proceeding to patch the operating system via

apt-get update

and then

apt-get upgrade

.

But please educate me if I am incorrect.

Thanks,

[memilanuk]

Whether the system is 'wide open' probably depends on what all you have running (and listening to ports).

I believe the default firewall policy tends towards 'mostly allow'. To change it to 'mostly deny', you probably would want to run something like:

sudo ufw default deny

(with the caveat that I'm not sitting in front of my Ubuntu box right now, so you would be well advised to double check the above via the man page)

[cement_head]

Do I need to configure a specific port on ufw to enable last.fm using rhthymbox?