home *** CD-ROM | disk | FTP | other *** search
- ufw
- ---
- On installation, ufw is not automatically enabled. To load the firewall and
- enable it on boot, run:
-
- # ufw enable
-
- See 'man ufw' and README for more information.
-
-
- Upgrading
- ---------
- It is important to note that to properly support remote users, the firewall
- will not be automatically restarted during upgrades. After an upgrade, either
- reboot or perform:
-
- # /etc/init.d/ufw restart
-
- Please note that the above command will briefly open the firewall before
- reloading the rules.
-
-
- Preseeding
- ----------
- ufw has support for preseeding. To enable a default deny firewall, add to your
- preseed file:
- ufw ufw/enable boolean true
-
- And to allow a service, use:
- ufw ufw/allow_known_ports multiselect SSH, WWW
-
- Currently, ufw knows about the following services:
- Cups # tcp and udp port 631
- DNS # tcp and udp port 53
- Imap (Secure) # tcp port 993
- Pop3 (Secure) # tcp port 995
- SSH # tcp port 22
- Samba # udp ports 137, 138 and tcp ports 139, 445
- Smtp # tcp port 25
- WWW # tcp port 80
- WWW (Secure) # tcp port 443
-
- You may also add additional ports by supplying a space separated list of
- services from /etc/services, a port number or a port/protocol combination. Eg:
- ufw ufw/allow_custom_ports string auth 8080 1194/udp
-
- Please keep in mind that these ports and services are not associated with ufw
- application profiles.
-
-