Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I understand the Ubuntu comes with firwallul UFW is true? There is a GUI for it? if so, what is his name and where do I download? It is possible that UFW notify us (like in windows with a pop-up windows)when someone wants access to your pc or when an application wants to go out on the internet? Is there any firewall for ubuntu notify you when someone wants access to your PC or when an application wants to access the Internet?

share|improve this question
See also Is there a preinstalled or automatic firewall? – 8128 Nov 30 '10 at 17:42

Yes Ubuntu has a firewall installed by default.

The Firewall in Ubuntu is Wikipedia iptables, it also comes with an easy to use command line frontend called Wikipedia UFW (Uncomplicated Firewall).

If you want to change any settings, you can use the graphical front end to that command line front end, GUFW .

alt text

As for your other question, getting a warning when an application connects to the internet:

I don't know of any programs that do this*, but I have written one. Now, this isn't great quality software - it's a quick hack in fact -but it works all right. You'll notice I haven't packaged it in any way, because I don't have any use for it and I don't think its tested well enough to be deployed on Anything That Matters

It doesn't even have a name, here's how it looks:

alt text
(ignore the German captions, they will be in your local language)

And here's how to use it:

  • Install Python 3

  • download it and save it as a file on your computer

  • Via the file properties, mark it as executable

  • Double click and choose "Run"

The program will issue a warning for every application that tries to access the internet. It will not prevent it from doing so, but it'll let you know. You then have the option of putting it on a "White List" of trusted applications, which causes it to not warn you again about this particular program.

If you start it from a terminal, you'll get a few useful messages about what it's doing.

Again I have to stress, even though it works, I haven't tested it properly (i.e. with many users trying it out).

For the purposes of support, you may send me email about it, I don't mind

*: It seems UFW is able to do it!

This section is really better suited for someone managing servers than for desktop users:

UFW comes with an Application Filter. It's configuration is a simple text file at /etc/ufw/applications.d.

To get a list of all the application filters, type

sudo ufw app list 

Which should look like this:

Available applications:
  Apache Full
  Apache Secure

To get more details on any one application, type - for example:

sudo ufw app info 'Apache Full' 

More details are available in the relevant Ubuntu Wiki page.

As for the question of default configuration: By default, Ubuntu ships with no open ports on public interfaces (source).

share|improve this answer
OK, thx, i let the quiestion opened in case if anyone know about firewall notification or a metod for notification. How many ports are opened in ubuntu by default? and what ports we must block/close them to be safe? in a word, which is the best method or setting to be safe and unpenetrated – LuC1F3R Nov 30 '10 at 18:06
your software looks interesting. Planning to make it official? – RolandiXor Nov 30 '10 at 18:21
@Roland Taylor, well nobody knew about it until now. if, for some reason, there turns out to be a lot of interest in it, sure, I'll take the time to package it up and give it an interface (and probably rewrite it for python2, and work over the parts of the code that make me cringe a few months later now, ..), but at the minute, it doesn't seem likely. Additionally, it's not really the sort of software that Ubuntu wants to pride itself on (asks the user to make a decision for not a very good reason). – Stefano Palazzo Nov 30 '10 at 18:29
Actually for many instances this kind of software would be highly coveted. For example I was working at an internet cafe recently, and something similar to this would have been good enough to pay for even! – RolandiXor Nov 30 '10 at 18:49

Question 1.- here

Question 2.- as i far i know there isn't any tool for notification when someone wants access to your pc or when an application wants to go out on the internet? maybe that will be a feature for GUFW

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.