How-To: UFW

[peridot]

Is there a default state for ports? When I enable ufw, are all ports in deny or allow mode or do I need to state one or the other? I mean, if I do not state anything about port X, what is the default state?

Thanks!

I know this is late, but I thought I'd reply for anyone searching. You can type ufw status to see the list of rules and whether or it is enabled (active) or disabled (inactive). You can do "ufw default deny", "ufw default allow" and "ufw default reject" to set its default behavior.

[piju]

any body tried firestarter before ?

[kibrun]

any body tried firestarter before ?

i did have a go with firestarter. very easy in gui and for desktop user. not recommended for server use since i don't install gui in server. now i'm trying to learn ufw. in the mean time i'm using script for my iptables from : http://ubuntuforums.org/showthread.php?t=159661. Hope this help.

[MaxVK]

I believe that Gufw is advised over Firestarter because Firestarter is no longer maintained, which is not a good state for firewall software.

[clapika]

can ufw deny icmp from eth0(client) to eth1(server) if make topology of
SERVER<------->(eth1)UFW(eth0)<-------->CLIENT
can?

[deesto]

No.

iptables is enabled as default. ufw is an optional simplified front-end for iptables.

I'm really confused about all this: I am told that ufw is an optional, "simplified" interface to netfilter, and that iptables is still active in addition to ufw, but I don't know of a simple way in Ubuntu to use iptables instead of ufw. In addition, the traditional iptables rules configuration files (in RH/Fedora, /etc/sysconfig/iptables) don't seem to exist, and instead rules are written directly into the kernel, and after that I don't know where they are saved. Is this accurate?

Are ufw created via CLI stored in a similar manner, e.g., not in config files and direct to the kernel? I'm familiar with the files in /etc/ufw/*, but I don't see the ufw rules I create with "sudo ufw ..." being saved there.

[xravenz]

chkconfig --level 2345 ufw on

May or may not work for users.

You may need to install chkconfig first.

sudo apt-get install chkconfig

[deesto]

chkconfig --level 2345 ufw on

May or may not work for users.

You may need to install chkconfig first.

sudo apt-get install chkconfig

Sorry: what? If that was meant for me, thanks, but I don't understand how it applies to my questions about how applied ufw firewall rules are saved? how iptables can be used instead of ufw? etc.?

[ryzingsrinivas]

Hi ,

I am getting log messages in ubuntu server 10.10,

Nov 16 18:25:31 ubuntu kernel: [30373.102472] [UFW BLOCK] IN=eth0 OUT= MAC=e0:69:95:77:a7:30:00:25:5e:c9:23:95:08:00 SRC=122.175.35.121 DST=192.168.1.108 LEN=40 TOS=0x00 PREC=0x00 TTL=61 ID=0 DF PROTO=TCP SPT=19082 DPT=8088 WINDOW=0 RES=0x00 RST URGP=0
Nov 16 18:25:52 ubuntu kernel: [30393.423502] [UFW BLOCK] IN=eth0 OUT= MAC=e0:69:95:77:a7:30:00:25:5e:c9:23:95:08:00 SRC=122.175.35.121 DST=192.168.1.108 LEN=40 TOS=0x00 PREC=0x00 TTL=61 ID=0 DF PROTO=TCP SPT=19097 DPT=8088 WINDOW=0 RES=0x00 RST URGP=0
Nov 16 18:26:12 ubuntu kernel: [30413.723842] [UFW BLOCK] IN=eth0 OUT= MAC=e0:69:95:77:a7:30:00:25:5e:c9:23:95:08:00 SRC=122.175.35.121 DST=192.168.1.108 LEN=40 TOS=0x00 PREC=0x00 TTL=61 ID=0 DF PROTO=TCP SPT=19110 DPT=8088 WINDOW=0 RES=0x00 RST URGP=0


How to resolve this problem .Please help me

Thanks,
Srinivas

[cintiaarosales]

Hola guys,
Interesting thread, from its time-span to the various (related) issues that were raised. I’m looking for info about iptables frontend/GUI for ufw/firewall management for Ubuntu, etc. and thought maybe someone here can advise. But maybe I can also help a bit - in my searches I found this wiki post, it has some good info as well as different methods/tools to manage iptables and ufw.
My issue is if I have several Ubuntu firewalls to manage on different servers, and I’m not sure what would be the best option. In the wiki post they mention something called firewall builder, and I also found this Ubuntu firewall management tool, and from what I understand, these seem like something that might be good. I’m wondering if anyone has any experience managing multiple Ubuntu firewall instance, or can consult about these management tools or would a frontend/gui be good enough, and which would give the best security?
Any input would be appreciated Cintia