Security issue with ufw

Edited by cryptodan, 12 June 2024 - 08:58 AM.

I've always found the default settings to be enough.

To enable.

sudo ufw enable 

To check status.

sudo ufw status verbose

This may be useful.

https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-with-ufw-on-ubuntu

sudo ufw status numbered
Output
Status: active

     To                         Action      From
     --                         ------      ----
[ 1] Anywhere                   DENY IN     203.0.113.100             
[ 2] Anywhere on eth0           ALLOW IN    203.0.113.102     

sudo ufw status
Output
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), deny (routed)
New profiles: skip

Learning to read man(uals) pages, documentation, and other how-tos is absolutely essential for Linux (and any other Unix) administration, even if all you're doing is using it as a bog normal desktop.  It doesn't hurt with Windows and Mac, either.   But with Linux, you're far more likely to get someone to tell you to "RTFM" if you're asking an elementary question that's already answered in the utility's man page.  Also don't forget to "man man" for the man page on man itself.

https://manpages.ubuntu.com/manpages/noble/en/man8/ufw.8.html

status: show status of firewall and  ufw  managed  rules.  Use  "status  verbose"  for  extra information.

Look at the man page. It explains why you're seeing what you are:  status only shows ufw managed rules if there are any.  If there aren't any it only displays whether ufw is enabled or not.  Yes there are methods to have firewall rules that aren't managed by ufw.  Ufw is just one of several utilities used to manage the various ways the Linux kernel can have firewall rules set up.  The most common default set is a stateful firewall where uninitiated incoming traffic is blocked or dropped while permitting incoming traffic from known outgoing traffic, all outbound traffic allowed. Otherwise your programs would never receive the responses from DNS query, web browser requests, etc.

Edited by h_b_s, 12 June 2024 - 02:46 PM.