Uncomplicated Firewall - Revision history

Prabuanand: added note on gufw

2025-05-11T09:24:27Z

added note on gufw

← Older revision		Revision as of 09:24, 11 May 2025
Line 1:		Line 1:
	UFW stands for [https://launchpad.net/ufw Uncomplicated Firewall], and is a program for managing a netfilter firewall. It provides a command line interface and aims to be uncomplicated and easy to use.		UFW stands for [https://launchpad.net/ufw Uncomplicated Firewall], and is a program for managing a netfilter firewall. It provides a command line interface and aims to be uncomplicated and easy to use.

	== Installation ==		== Installation ==
Line 7:		Line 7:
	Once the community repository has been enabled, UFW can be installed by issuing the following command:		Once the community repository has been enabled, UFW can be installed by issuing the following command:
	{{cmd\| apk add ip6tables ufw}}		{{cmd\| apk add ip6tables ufw}}

			[https://costales.github.io/projects/gufw/ gufw] is the graphical user interface for ufw. The {{pkg\|gufw}} package is currently available in the [[Repositories#Testing\|testing]] repository.

	== Basic configuration ==		== Basic configuration ==

2025-04-09T11:19:56Z

added category Firewall Category:Firewall

← Older revision		Revision as of 11:19, 9 April 2025
Line 38:		Line 38:
	* [[nftables]]: kernel subsystem that does the actual filtering and its user-space utilities.		* [[nftables]]: kernel subsystem that does the actual filtering and its user-space utilities.

	[[Category:~~Networking]]~~		[[Category:Firewall]]
	~~[[Category:Security~~]]

2024-07-07T09:04:38Z

2024-07-07T09:02:40Z

2021-08-06T00:47:33Z

Diskless mode: Path template used

← Older revision		Revision as of 00:47, 6 August 2021
Line 30:		Line 30:
	== Diskless mode ==		== Diskless mode ==

	If you have installed Alpine Linux as [[Installation#Installation_Handbook\|diskless]] then you need to use [[Alpine local backup\|Alpine Local Backup (lbu)]] to save your UFW configuration. UFW data is stored in ~~<code>~~/usr/lib/ufw~~</code>~~, therefore use the following commands to save the UFW configuration:		If you have installed Alpine Linux as [[Installation#Installation_Handbook\|diskless]] then you need to use [[Alpine local backup\|Alpine Local Backup (lbu)]] to save your UFW configuration. UFW data is stored in {{Path\|/usr/lib/ufw}}, therefore use the following commands to save the UFW configuration:
	{{cmd\|lbu add /usr/lib/ufw		{{cmd\|lbu add /usr/lib/ufw
	lbu commit}}		lbu commit}}

2021-07-30T21:06:22Z

Installation

← Older revision		Revision as of 21:06, 30 July 2021
Line 3:		Line 3:
	== Installation ==		== Installation ==

	UFW can be found in the ~~testing~~ repository. Read [[Alpine_Linux_package_management#Repository_pinning]] to enable the ~~testing~~ repository.		UFW can be found in the community repository. Read [[Alpine_Linux_package_management#Repository_pinning]] to enable the community repository.

	Once the ~~testing~~ repository has been enabled, UFW can be installed by issuing the following command:		Once the community repository has been enabled, UFW can be installed by issuing the following command:
	{{cmd\| apk add ip6tables ufw~~@testing~~}}		{{cmd\| apk add ip6tables ufw}}

	== Basic configuration ==		== Basic configuration ==

2015-10-04T09:38:35Z

Fixed formatting

← Older revision		Revision as of 09:38, 4 October 2015
Line 12:		Line 12:
	The following is a simple configuration that will deny all incoming and outgoing data communication by default and allow incoming SSH, outgoing DNS and NTP traffic:		The following is a simple configuration that will deny all incoming and outgoing data communication by default and allow incoming SSH, outgoing DNS and NTP traffic:

	~~{{cmd\|~~ufw default deny incoming		<pre>ufw default deny incoming
	ufw default deny outgoing		ufw default deny outgoing
	ufw limit SSH # open SSH port and protect against brute-force login attacks		ufw limit SSH # open SSH port and protect against brute-force login attacks
Line 19:		Line 19:
	# The following instructions will allow apk to work:		# The following instructions will allow apk to work:
	ufw allow out DNS # allow outgoing DNS		ufw allow out DNS # allow outgoing DNS
	ufw allow out 80/tcp # allow outgoing HTTP traffic		ufw allow out 80/tcp # allow outgoing HTTP traffic</pre>
	}}

	The following lines are only needed the first time you install the package:		The following lines are only needed the first time you install the package:
	{{cmd\|ufw enable		{{cmd\|ufw enable # enable the firewall
	rc-update add ufw # add UFW init scripts}}		rc-update add ufw # add UFW init scripts}}

2015-10-04T09:33:17Z

Basic configuration

← Older revision		Revision as of 09:33, 4 October 2015
Line 15:		Line 15:
	ufw default deny outgoing		ufw default deny outgoing
	ufw limit SSH # open SSH port and protect against brute-force login attacks		ufw limit SSH # open SSH port and protect against brute-force login attacks
			ufw allow out 123/udp # allow outgoing NTP (Network Time Protocol)

			# The following instructions will allow apk to work:
	ufw allow out DNS # allow outgoing DNS		ufw allow out DNS # allow outgoing DNS
	ufw ~~allout~~ out ~~123~~ # allow outgoing ~~NTP~~}}		ufw allow out 80/tcp # allow outgoing HTTP traffic
			}}

	The following lines are only needed the first time you install the package:		The following lines are only needed the first time you install the package:

2015-10-01T17:08:24Z

Diskless mode

← Older revision		Revision as of 17:08, 1 October 2015
Line 24:		Line 24:
	Check the status of UFW:		Check the status of UFW:
	{{cmd\|ufw status}}		{{cmd\|ufw status}}

			== Diskless mode ==

			If you have installed Alpine Linux as [[Installation#Installation_Handbook\|diskless]] then you need to use [[Alpine local backup\|Alpine Local Backup (lbu)]] to save your UFW configuration. UFW data is stored in <code>/usr/lib/ufw</code>, therefore use the following commands to save the UFW configuration:
			{{cmd\|lbu add /usr/lib/ufw
			lbu commit}}

			[[Category:Networking]]
			[[Category:Security]]

2015-10-01T16:58:23Z

Basic configuration section

← Older revision		Revision as of 16:58, 1 October 2015
Line 7:		Line 7:
	Once the testing repository has been enabled, UFW can be installed by issuing the following command:		Once the testing repository has been enabled, UFW can be installed by issuing the following command:
	{{cmd\| apk add ip6tables ufw@testing}}		{{cmd\| apk add ip6tables ufw@testing}}

			== Basic configuration ==

			The following is a simple configuration that will deny all incoming and outgoing data communication by default and allow incoming SSH, outgoing DNS and NTP traffic:

			{{cmd\|ufw default deny incoming
			ufw default deny outgoing
			ufw limit SSH # open SSH port and protect against brute-force login attacks
			ufw allow out DNS # allow outgoing DNS
			ufw allout out 123 # allow outgoing NTP}}

			The following lines are only needed the first time you install the package:
			{{cmd\|ufw enable
			rc-update add ufw # add UFW init scripts}}

			Check the status of UFW:
			{{cmd\|ufw status}}

← Older revision		Revision as of 09:04, 7 July 2024
Line 36:		Line 36:
	== See also ==		== See also ==

	* [[nftables]]		* [[nftables]]: kernel subsystem that does the actual filtering and its user-space utilities.

	[[Category:Networking]]		[[Category:Networking]]
	[[Category:Security]]		[[Category:Security]]