Linux Certif

Toute la documentation sur la certification Linux LPI

gufw

NAME

Gufw - Graphic user interface for managing ufw

DESCRIPTION

Gufw is an easy to use Ubuntu / Linux firewall, powered by ufw.

Gufw is an easy, intuitive, way to manage your Linux firewall. It supports common tasks such as allowing or blocking pre-configured, common p2p, or individual ports port(s), and many others! Gufw is powered by ufw , runs on Ubuntu, and anywhere else Python, GTK, and Ufw are available. Introduction iptables is already a very powerful tool by itself, but it's syntax can get awkward at times and hard to figure out, so Ubuntu developers decided to make ufw ("The reason ufw was developed is that we wanted to create a server-level firewalling utility that was a little bit more for `human beings`"), which was to be simpler. Now, on the graphical side of things, Firestarer already existed. But why not make an even easier to use GUI for desktop `human beings`, powered by ufw? This is where Gufw comes in.

RUN

You can run Gufw in GNOME menu: /System/Administration/Firewall configuration

USAGE

BASIC SETTINGS

Gufw has two states: Enabled and disabled. When Gufw is enabled, you can allow/reject/deny all incoming and outgoing connections.

ADD PRECONFIGURED RULE(S)

You can select between more Programs and Services preconfigured. Once Program/Service can have multiples rules.

ADD SIMPLE RULE(S)

You can specify the port or service, and protocol to be allowed (allow traffic), reject (reject traffic without reply), denied (deny traffic with reply), limit (limit traffic) on the host, or limit an IP or Port (Protecting against brute-force login attacks). The port can be a number of 5 digits, from 1 to 65535. The service can be any of /etc/services file (By example tcpmux, echo, discard, systat...). The protocol can be:
   1. tcp: Apply rule for all traffic in protocol tcp.
   2. udp: Apply rule for all traffic in protocol udp.
   3. both: Apply rule for all traffic in protocol tcp and udp.
   

ADD ADVANCED RULE(S)

You can add an advanced rule. You can specify:
   1. Protocol: tcp, udp or both.
   2. From IP Addres: You can allow/deny/reject/limit traffic from IP address. This parameter is optional or you can use "Any". Example for a range: 192.168.1.0/9
   3. From Port: You can allow/deny/reject/limit traffic from a port. This parameter is optional. The port can be a number of 5 digits, from 1 to 65535. You can use a range ports with this format port1:port2 (by example 3234:3237), or add multiple ports with port1,port2 (by example 3234,3254).
   4. To IP Addres: You can allow/deny/limit traffic to an IP address. This parameter is optional or you can use "Any". Example for a range: 192.168.1.0/9
   5. To Port: You can allow/deny/reject/limit traffic to a Port. This parameter is optional. The port can be a number of 5 digits, from 1 to 65535. You can use a range ports with this format port1:port2 (by example 3234:3237).

GENERAL TO PRECONFIGURED / SIMPLE / ADVANCED

With the extended parameters you can: Insert a rule in a specific row Set the log level for ufw.

REMOVE ONE RULE

Steps:
   1. Select a rule in the list.
   2. Click in Remove button. You can delete more rules if you select it.

RESET CONFIGURATION

You will remove all rules and reset the ufw configuration to intial status!

EDIT PREFERENCES

You can edit your preferences in /Edit/Preferences menu. Preferences:
   1. Register Gufw log: You will have got a log of all operations of Gufw.                     

   2. ufw log enabled: You will enable/disable and set the level of the ufw log.

LISTENING REPORT

You can enable the Listening Report in the Preferences window. The listening report will display the ports on the live system in the listening state for TCP and the open state for UDP. It's the same report that the listening report in ufw.

NOTES

HOW TO AUTOSTART GUFW WITH THE SYSTEM?

A short answer is, you really don't need to autostart Gufw. Gufw is just a settings tool for ufw (the real firewall), and they are split separate. Think of Gufw as a settings dialog. After you do all of the changes and close it, the settings are still in effect (for example, when you setup a new printer - after you close the setup window, your printer setup still stays!). So there is no need to add Gufw to auto-start, unless you're going to change your firewall settings very frequently. If you enable the firewall and close Gufw, the firewall will still be enabled, even after a reboot. REMEMBER: Once configured it will stay that way, so you don't need to be running Gufw on your desktop all the time!

SEE ALSO

ufw(8)

AUTHOR

Gufw is (C) 2008-2010, Marcos Alvarez Costales.

This manual page was originally written by Marcos Alvarez Costales <marcos@ubuntu-ast.org>