NAME
Gufw - Graphic user interface for managing ufw
DESCRIPTION
Gufw is an easy to use Ubuntu / Linux firewall, powered by ufw.
Gufw is an easy, intuitive, way to manage your Linux firewall. It
supports common tasks such as allowing or blocking pre-configured,
common p2p, or individual ports port(s), and many others! Gufw is
powered by ufw , runs on Ubuntu, and anywhere else Python, GTK, and Ufw
are available. Introduction iptables is already a very powerful tool
by itself, but it's syntax can get awkward at times and hard to figure
out, so Ubuntu developers decided to make ufw ("The reason ufw was
developed is that we wanted to create a server-level firewalling
utility that was a little bit more for `human beings`"), which was to
be simpler. Now, on the graphical side of things, Firestarer already
existed. But why not make an even easier to use GUI for desktop `human
beings`, powered by ufw? This is where Gufw comes in.
RUN
You can run Gufw in GNOME menu: /System/Administration/Firewall
configuration
USAGE
BASIC SETTINGS
Gufw has two states: Enabled and disabled. When Gufw is enabled, you
can allow/reject/deny all incoming and outgoing connections.
ADD PRECONFIGURED RULE(S)
You can select between more Programs and Services preconfigured. Once
Program/Service can have multiples rules.
ADD SIMPLE RULE(S)
You can specify the port or service, and protocol to be allowed (allow
traffic), reject (reject traffic without reply), denied (deny traffic
with reply), limit (limit traffic) on the host, or limit an IP or Port
(Protecting against brute-force login attacks). The port can be a
number of 5 digits, from 1 to 65535. The service can be any of
/etc/services file (By example tcpmux, echo, discard, systat...). The
protocol can be:
1. tcp: Apply rule for all traffic in protocol tcp.
2. udp: Apply rule for all traffic in protocol udp.
3. both: Apply rule for all traffic in protocol tcp and udp.
ADD ADVANCED RULE(S)
You can add an advanced rule. You can specify:
1. Protocol: tcp, udp or both.
2. From IP Addres: You can allow/deny/reject/limit traffic from IP
address. This parameter is optional or you can use "Any". Example for a
range: 192.168.1.0/9
3. From Port: You can allow/deny/reject/limit traffic from a port.
This parameter is optional. The port can be a number of 5 digits, from
1 to 65535. You can use a range ports with this format port1:port2 (by
example 3234:3237), or add multiple ports with port1,port2 (by example
3234,3254).
4. To IP Addres: You can allow/deny/limit traffic to an IP address.
This parameter is optional or you can use "Any". Example for a range:
192.168.1.0/9
5. To Port: You can allow/deny/reject/limit traffic to a Port. This
parameter is optional. The port can be a number of 5 digits, from 1 to
65535. You can use a range ports with this format port1:port2 (by
example 3234:3237).
GENERAL TO PRECONFIGURED / SIMPLE / ADVANCED
With the extended parameters you can: Insert a rule in a specific row
Set the log level for ufw.
REMOVE ONE RULE
Steps:
1. Select a rule in the list.
2. Click in Remove button. You can delete more rules if you select
it.
RESET CONFIGURATION
You will remove all rules and reset the ufw configuration to intial
status!
EDIT PREFERENCES
You can edit your preferences in /Edit/Preferences menu. Preferences:
1. Register Gufw log: You will have got a log of all operations of
Gufw.
2. ufw log enabled: You will enable/disable and set the level of the
ufw log.
LISTENING REPORT
You can enable the Listening Report in the Preferences window. The
listening report will display the ports on the live system in the
listening state for TCP and the open state for UDP. It's the same
report that the listening report in ufw.
NOTES
HOW TO AUTOSTART GUFW WITH THE SYSTEM?
A short answer is, you really don't need to autostart Gufw. Gufw is
just a settings tool for ufw (the real firewall), and they are split
separate. Think of Gufw as a settings dialog. After you do all of the
changes and close it, the settings are still in effect (for example,
when you setup a new printer - after you close the setup window, your
printer setup still stays!). So there is no need to add Gufw to auto-
start, unless you're going to change your firewall settings very
frequently. If you enable the firewall and close Gufw, the firewall
will still be enabled, even after a reboot. REMEMBER: Once configured
it will stay that way, so you don't need to be running Gufw on your
desktop all the time!
SEE ALSO
ufw(8)
AUTHOR
Gufw is (C) 2008-2010, Marcos Alvarez Costales.
This manual page was originally written by Marcos Alvarez Costales
<marcos@ubuntu-ast.org>
10 Oct 2010 gufw(8)