Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have heard of ufw and of course using iptables but is there any other firewall or port manager for incoming/outgoing connections. I am also looking for GUI based ones apart from terminal ones and a bonus for any tool used to help in the DDOS attacks and automatic banning that come with Ubuntu. Not talking server only but desktop too.

share|improve this question
up vote 2 down vote accepted

In terms of firewall tools, there are several graphical front ends, depending on your needs.

gufw is a graphical front end for ufw.

And there is also firestarter, which is popular.

Automatic banning can be done with several tools, iptables, denyhosts, and fail2ban.

I suggest you look at fail2ban.

DDOS attacks can not be stopped, you can set some limits with ufw and iptables.

Those tools should get you started in short order, let us know if you need additional information.

share|improve this answer

A list of debian based firewalls are found here: Some with a -gui, guarddog for example. Watch and see how many firewalls/ -gui based firewalls are not maintained anymore, except some website updates. The same with firestarter, there are some nasty security bugs related to firestarter. I would not recommend firestarter as a -gui based firewall because it isn't maintained. One example:

share|improve this answer

I would recommend OSSEC; though I have only used it for servers I do not see why it would not work on the desktop. While it is not GUI based it will adjust your firewall to respond to 'detected' attacks. If you need a GUI you could load a web front end for it, but that would actually open another hole on the machine as you would be running web server.

Front End: BASE">

OSSEC is an Open Source Host-based Intrusion Detection System. It performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

share|improve this answer
Hello cprofit, imagine seeing you here. – bodhi.zazen Dec 6 '11 at 3:04
ossec isn't a firewall or portmanager and isn't -gui based. – leoquant Dec 6 '11 at 8:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.