Results 1 to 10 of 10

Thread: I need some help with setting up UFW/GUFW ...

  1. #1
    Join Date
    Aug 2019
    Beans
    48

    Question I need some help with setting up UFW/GUFW ...

    Is there a list of recommended ports that should be opened and closed?

  2. #2
    Join Date
    Mar 2010
    Location
    Squidbilly-Land
    Beans
    Hidden!
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: I need some help with setting up UFW/GUFW ...

    Simple.
    Close them all, except the ones you specifically run network services on that you want available to other systems.

    For example, if you run a web server that only listens on port 443/tcp (HTTPS), then that is the only port you would open.

    If you run ssh-server, then for the local network, you'd want to allow 22/tcp. If you allow it from the internet, then I'd strongly suggest running fail2ban which will automatically create a firewall block after 3 failed attempted logins. BTW, internet attempts shouldn't allow passwords for ssh authentication, only ssh-keys.

    Easy enough?

  3. #3
    Join Date
    Aug 2019
    Beans
    48

    Re: I need some help with setting up UFW/GUFW ...

    I am not running a server or any type of service.

    I just want to be able to surf the web, use email and play some games.
    Could you tell me what ports to use for the above mentioned usage?

    I am new to Linux. I have installed Kubuntu Plasma. It's awesome.
    Thanks in advance.

  4. #4
    Join Date
    Feb 2010
    Location
    South of the Maple Trees
    Beans
    Hidden!
    Distro
    Xubuntu 18.04 Bionic Beaver

    Re: I need some help with setting up UFW/GUFW ...

    Quote Originally Posted by dagmann View Post
    I am not running a server or any type of service.

    I just want to be able to surf the web, use email and play some games.
    Could you tell me what ports to use for the above mentioned usage?

    I am new to Linux. I have installed Kubuntu Plasma. It's awesome.
    Thanks in advance.
    You don't have to open any ports, if you're not running services. Just enable the firewall and enjoy the internet.

  5. #5
    Join Date
    Mar 2010
    Location
    Squidbilly-Land
    Beans
    Hidden!
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: I need some help with setting up UFW/GUFW ...

    If you aren't running any services/network daemons, then there is little need for a firewall if you are behind a normal, maintained, patched, router. If you take a computing device beyond that router or aren't 100% positive that the router is correctly maintained, and patched, monthly, then block all inbound ports with a firewall on the computer.

    An unmaintained router is a security risk beyond all others. Mainly because it provides a false sense of security that doesn't actually exist.

  6. #6
    Join Date
    Aug 2019
    Beans
    48

    Re: I need some help with setting up UFW/GUFW ...

    My router is from Verizon FiOS. As far as I know they update is every now-and-again.

  7. #7
    Join Date
    Mar 2010
    Location
    Squidbilly-Land
    Beans
    Hidden!
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: I need some help with setting up UFW/GUFW ...

    Quote Originally Posted by dagmann View Post
    My router is from Verizon FiOS. As far as I know they update is every now-and-again.
    I wouldn't trust it. I've worked at a similar-sized ISP specifically with patching CPE routers. Don't trust those devices. Their goal is to minimize customer complaints and gather marketing data, not provide the best possible security. Every time a new firmware is pushed out, some number of devices have a fault of some sort.

    I have a mandated ISP router (no choice of mine). I have my own router just inside it to provide real protection. Their router runs in bridge mode and acts as a guest wifi for visitors. Mine runs a router distro that I know is correctly maintained and easily patched.
    Last edited by TheFu; 4 Weeks Ago at 04:58 PM.

  8. #8
    Join Date
    Feb 2010
    Location
    South of the Maple Trees
    Beans
    Hidden!
    Distro
    Xubuntu 18.04 Bionic Beaver

    Re: I need some help with setting up UFW/GUFW ...

    Quote Originally Posted by dagmann View Post
    My router is from Verizon FiOS. As far as I know they update is every now-and-again.
    In that case, I'd have the firewall enabled. I don't trust ISPs to keep endpoint devices updated. They care more about preventing the cost of sending someone out to do a hard reset or swapping of the router should the firmware upgrade brick it.

  9. #9
    Join Date
    Aug 2019
    Beans
    48

    Re: I need some help with setting up UFW/GUFW ...

    Solved

  10. #10
    Join Date
    Aug 2019
    Beans
    48

    Re: I need some help with setting up UFW/GUFW ...

    Solved

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •