Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So I recently installed ubuntu and I have been working with it no problem.While browsing through the security guides (specifically: I noticed this: "enable the firewall (sudo ufw enable) without further tweaks;" After some further reading I found out that ubuntu comes with the kernel firewall and ufw is just an easier iptables manipulator so why do I need to enable it without any tweaks?

Or am I completely wrong and there is another reason its required?

share|improve this question
up vote 0 down vote accepted

I am no expert, just a user with some experience. I think you misread

iptables is a set of rules in a file which are the basis for what the firewall can/should do. The UFW program is a command line interface for interfacing with the firewall (enable, disable, status) and modifying the iptables rules without directly editing the iptables. GUFW is a HUI based program to do the same thing. When you run "sudo ufw enable" you are not turning ufw on, you are turning on the firewall.

share|improve this answer
Yea thats what I thought at first but it seemed wierd to be the firewall disabled as they are usually of of the first lines of defence – Nick Dec 29 '13 at 17:30

It says just enable firewall with default configuration. If you do not have any idea what is or not, do not tweak it. By the way ufw is the kernel firewall you mentioned.

share|improve this answer
Meaning ubuntu has firewall completely off by default? who thought of that! – Nick Dec 29 '13 at 17:14
When you install ubuntu, the firewall is disabled by default. You can check it by typing "service ufw status". – Ricardo Cristian Ramirez Dec 29 '13 at 17:16
Uhh isnt that a huge security hole if its off by default? – Nick Dec 29 '13 at 17:17
Firewall does packet filtering, so it slows the network traffic a little bit. In case you already behind a firewall, generally it is disabled. – Ricardo Cristian Ramirez Dec 29 '13 at 17:17
It is not a security hole as I said previous comment. – Ricardo Cristian Ramirez Dec 29 '13 at 17:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.