Introduction[edit]

It is recommended to use a simple host firewall and deny any incoming connections on all ports. For a Linux host OS like Debian, Ubuntu and Arch Linux, gufw ^[archive] provides a simple graphical user interface for the Uncomplicated Firewall ^[archive] program. ^[1] It is easy to perform common tasks like blocking or allowing P2P, individual, or pre-configured ports.

How-to: Install and Configure a Firewall[edit]

The following steps install gufw on a Debian host ^[archive].

1. Install gufw.

sudo apt update && sudo apt install gufw

sudo apt update && sudo apt install gufw

2. Start gufw.

gufw

gufw

3. Press Unlock. Enter the password.

4. Press Enabled. ^[2]

5. Check the settings.

By default, the settings should be Incoming: Deny and Outgoing: Allow.

Although not recommended, it is possible to add special firewall rules, use pre-configured options for common programs and services, or set other advanced options in gufw by following this guide ^[archive].

For further information on firewalls, see here.

References[edit]

↑ Uncomplicated Firewall by itself only provides a command-line interface for managing the netfilter firewall. Iptables ^[archive] are used by the program for configuration.
↑ The firewall is disabled by default.

Whonix ™ is Supported by Evolution Host DDoS Protected VPS. Stay private and get your VPS with Bitcoin or Monero.