how_to_set_up_ufw.md

How to set up UFW Firewall

UFW or ufw is a magnificent little firewall.

Start by checking current status:

sudo ufw status
Status: inactive

Allow for outgoing connections, the default recommendation.

sudo ufw default allow outgoing

Deny for incoming connections, the default recommendation.

sudo ufw default deny incoming

Allow for SSH connections.

sudo ufw allow ssh

Enable UFW.

sudo ufw enable

Check the current status:

sudo ufw status verbose
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), disabled (routed)
New profiles: skip

To                         Action      From
--                         ------      ----
22/tcp                     ALLOW IN    Anywhere
22/tcp (v6)                ALLOW IN    Anywhere (v6)

The above example has IPv6 enabled, see my separate TIL on that.

There is so much more you can do, I am barely scratching the surface here, but what I want to demonstrate is how easy it is to get started. I have seen UFW referred to as the "Uncomplicated Firewall", and I think that is a very suitable name.

Resources and References

• FAQ