Introduction

Gufw/gufw.png Gufw is a firewall powered by UFW (Uncomplicated Firewall). For an overview of firewalls, please see Firewall.

Installation

In order to install Gufw, you must have the Universe repository enabled. To install, use Synaptic, or run from Terminal:

sudo apt-get install gufw

Usage

IconsPage/menu.png To access GUFW, go to System->Administration->Firewall configuration.

By default, the firewall is disabled.

Enabling

To enable the firewall, simply check the Enabled button and the default will be set to Deny for incoming traffic and Allow for outgoing traffic.

Adding Rules

To configure the firewall, we add rules. Simply click the Add button and a new window will pop up. For details about this implementation, see the UFW page. Rules can be configured for TCP and UDP ports, and UFW has some preconfigured programs/services to make setting up rules for them easy.

The available options for rules are Allow, Deny, Reject, and Limit:

Preconfigured

The Preconfigured tab gives us some options for controlling firewall options for common programs and services.

You have several categories and subcategories. You can filter by name/description/ports too.

Simple

Not all program configurations are available in Gufw, but we can still add rules for them using the Simple tab.

Again, we'll use the SSH example - let's just pretend for a moment that there isn't a preconfigured option for it. To enable it in the Simple tab, select "Allow", "TCP", "22" and click Add.

Advanced

Sometimes we want to configure access based on a specific IP, so we use the Advanced tab.

Preferences

There are a few preferences available to set in Gufw, and can be controlled from Edit->Preferences

Here you can control logging for ufw and for Gufw, create profiles and set general interface preferences. The default is to enable logging for ufw, and disable logging for Gufw.

Use Gufw without Graphical Environment or Remote Computer

Requirements

You can use Gufw in a Linux without Graphical Environment (for example an Ubuntu Server) or from a remote computer. You will need Gufw 13.10.2 or higher. Just export your X Display. All the operations in Gufw will be apply in the remote computer.

How use it


Important: If you enable the firewall under ssh without the ssh rule, you'll close the ssh connection, then before to enable Gufw under a ssh connection, append the ssh rule using ufw with this command:

sudo ufw enable ssh


Enable IP forwarding

Requirements

Gufw 14.10 or higher.

How use set it

To routing policy and rules, you must setup IP forwarding in the system:

    #net/ipv4/ip_forward=1
    #net/ipv6/conf/default/forwarding=1
    #net/ipv6/conf/all/forwarding=1

    sudo ufw reload

Open Gufw, you'll see a new "Routed" option (with an arrow around the shield) and you can forward any rule from the Update window or Advanced Tab in Add window.

Other Resources

General

Online Great (Updated) Tutorials in this language


CategoryNetworking CategorySecurity

Gufw (last edited 2014-07-27 16:33:38 by din-184-171-231-77)