Uncomplicated Firewall (UFW) is a program for managing a netfilter firewall designed to be easy to use. It uses a command-line interface consisting of a small number of simple commands, and uses iptables for configuration. UFW is available by default in all Ubuntu installations since 8.04 LTS.[2] UFW has been available by default in all Debian installations since 10.
GUIs for Uncomplicated Firewall
Gufw is intended to be an easy, intuitive graphical user interface for managing Uncomplicated Firewall. It supports common tasks such as allowing or blocking pre-configured, common P2P, or individual ports. Gufw has been designed for Ubuntu, but is also available in Debian-based distributions and in Arch Linux; anywhere Python, GTK and UFW are available.
Features
| Netfilter feature[3]
|
0.31.1-1
|
0.34~rc-0ubuntu2
|
0.34-2
|
0.35
|
| Default incoming policy (allow/deny) |
Yes |
Yes |
Yes |
Yes
|
| Allow/deny incoming rules |
Yes |
Yes |
Yes |
Yes
|
| IPv6 (by default) |
Yes |
Yes |
Yes |
Yes
|
| Status |
Yes |
Yes |
Yes |
Yes
|
| Logging (on/off) |
Yes |
Yes |
Yes |
Yes
|
| Extensible framework |
Yes |
Yes |
Yes |
Yes
|
| Python 2.5 support |
Yes |
No |
No |
No
|
| Application integration |
Yes |
Yes |
Yes |
Yes
|
| IPv4 rate limiting via 'limit' command |
Yes |
Yes |
Yes |
Yes
|
| Internationalization |
Yes |
Yes |
Yes |
Yes
|
| Multiport incoming rules |
Yes |
Yes |
Yes |
Yes
|
| debconf/preseeding |
Yes |
Yes |
Yes |
Yes
|
| Default incoming policy (reject) |
Yes |
Yes |
Yes |
Yes
|
| Reject incoming rules |
Yes |
Yes |
Yes |
Yes
|
| Rule insertion |
Yes |
Yes |
Yes |
Yes
|
| Log levels |
Yes |
Yes |
Yes |
Yes
|
| Per rule logging |
Yes |
Yes |
Yes |
Yes
|
| Outgoing filtering (on par with incoming) |
Yes |
Yes |
Yes |
Yes
|
| Filtering by interface |
Yes |
Yes |
Yes |
Yes
|
| Bash completion |
Yes |
Yes |
Yes |
Yes
|
| Upstart support |
Yes |
Yes |
Yes |
Yes
|
| Improved reporting |
Yes |
Yes |
Yes |
Yes
|
| Reset command |
Yes |
Yes |
Yes |
Yes
|
| rsyslog support |
Yes |
Yes |
Yes |
Yes
|
| Delete by rule number |
Yes |
Yes |
Yes |
Yes
|
| Python 2.6 support |
Yes |
Yes |
Yes |
Yes
|
| 'show listening' report |
Yes |
Yes |
Yes |
Yes
|
| Python 2.7 support |
Yes |
Yes |
Yes |
Yes
|
| Increased protocol support (AH, ESP) |
Yes |
Yes |
Yes |
Yes
|
| IPv6 rate limiting via 'limit' command |
— |
Yes |
Yes |
Yes
|
| Python 3.2 support |
— |
Yes |
Yes |
No
|
| Python 3.3 support |
— |
Yes |
Yes |
Yes
|
| 'show added' report |
— |
Yes |
Yes |
Yes
|
| Python 3.4 support |
— |
Yes |
Yes |
Yes
|
| Before/after extensibility hooks |
— |
Yes |
Yes |
Yes
|
| Routed packet filtering (FORWARD) |
— |
Yes |
Yes |
Yes
|
| systemd support |
— |
— |
Yes |
Yes
|
| Increased protocol support (IGMP, GRE) |
— |
— |
Yes |
Yes
|
| Python 3.5 support |
— |
— |
Yes |
Yes
|
| Snappy for Ubuntu Core support |
— |
— |
— |
Yes
|
| Per rule comments |
— |
— |
— |
Yes
|
References
External links
|
|---|
| General | | |
|---|
| People | |
|---|
| Derivatives | |
|---|
| Software |
|
|---|
Technology and
user interface |
|
|---|
| Hardware | |
|---|
| Support |
|
|---|
| Fonts | |
|---|
| Media | |
|---|
| Related topics | |
|---|
|
.svg.png){kind=logo}
