UFW Firewall

<< Click to Display Table of Contents >>

Navigation:  Other Programs >

UFW Firewall

The UFW firewall is included with RigPi as an added security measure.  It can be enabled or disabled using Terminal.

 

sudo ufw enable

sudo ufw disable

 

To see UFW Help from Terminal:

 

man ufw

 

UFW stands for Uncomplicated Firewall. It is a user-friendly command-line tool used to manage firewall rules on Linux systems. UFW provides a simplified interface for configuring and managing the netfilter firewall, which is built into the Linux kernel. It is designed to make the process of setting up a firewall easier for users who may not be familiar with complex firewall concepts.

 

Here are some key features of UFW:

 

1. Ease of use: UFW aims to provide a straightforward interface for managing firewall rules, making it accessible to both novice and experienced users.

 

2. Command-line interface: UFW is primarily used through the command line, where users can enable or disable the firewall, add or remove rules, and view the status of the firewall.

 

3. Default policies: UFW follows a default deny incoming rule and a default allow outgoing rule. This means that incoming connections are blocked by default unless explicitly allowed, while outgoing connections are permitted.

 

4. Application profiles: UFW includes predefined application profiles that allow users to enable firewall rules for commonly used services such as SSH, HTTP, HTTPS, and more. These profiles simplify the process of allowing or denying access to specific services.

 

5. Simple syntax: UFW utilizes a straightforward syntax for adding rules. Users can specify ports, protocols, and IP addresses to define the desired network traffic rules.

 

6. Integration with iptables: UFW is built on top of the underlying iptables framework, which is a powerful firewall utility in Linux. UFW simplifies iptables management by providing an easier syntax and a higher-level interface.

 

It's important to note that UFW is primarily used on Ubuntu and Debian-based systems, but it can also be installed and used on other Linux distributions.

 

To see a list of open port in RigPi, open Terminal on the Raspberry Pi desktop and use the command:

 

sudo ufw status

 

as shown below.

 

pi@rigpi4:~ $ sudo ufw status

Status: active

 

 

 

 

 

To  

Action

From

--

------

----

80/tcp

ALLOW

Anywhere

64738/tcp

ALLOW

Anywhere

64738/udp

ALLOW

Anywhere

8080/tcp

ALLOW

Anywhere

8081/tcp

ALLOW

Anywhere

30040/udp

ALLOW

Anywhere

5900/tcp

ALLOW

Anywhere

23/tcp

ALLOW

Anywhere

22/tcp

ALLOW

Anywhere

3001/tcp*

ALLOW

Anywhere

80/tcp (v6)

ALLOW

Anywhere (v6)

64738/tcp (v6)

ALLOW

Anywhere (v6)

64738/udp (v6)

ALLOW

Anywhere (v6)

8080/tcp (v6)

ALLOW

Anywhere (v6)

8081/tcp (v6)

ALLOW

Anywhere (v6)

30040/udp (v6)

ALLOW

Anywhere (v6)

5900/tcp (v6)

ALLOW

Anywhere (v6)

23/tcp (v6)

ALLOW

Anywhere (v6)

22/tcp (v6)

ALLOW

Anywhere (v6)

3001/tcp (v6)

ALLOW

Anywhere (v6)

 

 

 

30001

ALLOW OUT

Anywhere

30001 (v6)

ALLOW OUT

Anywhere (v6)

 

 

 

 

*Note: TCP port 30001 will change depending on which RigPi account you are using.  Account 1 uses 30001, account 2 uses 30002, and so on.