Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

Does Ubuntu come with a preinstalled or automatic firewall? If not, do I need one?

I've read some articles about the advantages of linux over other operating systems about security (no need to have antivirus, ...) but would like to be sure.

Thank you very much!

share|improve this question
add comment

5 Answers 5

Ubuntu has a firewall included in the Kernel, and is running by default. What you need to manage this firewall are the iptables. But this are complicated to manage, so you can use UFW (uncomplicated firewall) to configure them. But UFW is still something hard for normal users, so what you can do is install GUFW Install GUFW that is just a graphical front end for UFW.

If you use GUFW, the first time you will see at the bottom of the window 'Disabled Firewall'. But this is not true, your firewall is already running. This enable/disable message refers to the rules set with UFW, not to the firewall.

If you don't believe me open a terminal and write

sudo iptables --list --verbose

Try this with GUFW enabled and disabled. You will see that the only diferences will be the rules you set with GUFW.

alt text

Source: http://ubuntuforums.org/showthread.php?t=1572636

share|improve this answer
1  
”Ubuntu has a firewall included in the Kernel, and is running by default” - yes, but what a lot of people ignore is that ”If you use GUFW, the first time you will see at the bottom of the window 'Disabled Firewall'. But this is not true, your firewall is already running. This enable/disable message refers to the rules set with UFW, not to the firewall.” that makes sense –  cipricus Jul 30 '12 at 18:18
    
this instructive idea is what newbies usually want to hear about firewall in ubuntu. here too: askubuntu.com/a/22668/47206, –  cipricus Jul 30 '12 at 18:25
add comment

Ubuntu doesn't have a firewall turned on by default in the basic installation.

If you need a firewall, I recommend using gufw to turn it on and manage it:

gufw Install gufw

Gufw is an easy, intuitive, way to manage your Ubuntu firewall, powered by ufw. It supports common tasks such as allowing or blocking pre-configured services, common P2P, or individual IP/port(s), and many others!

Here is the wiki.

share|improve this answer
5  
Ubuntu does have a firewall installed. It's ufw. The program gufw is just a GUI front-end. You can you ufw from a terminal. –  lamcro Oct 24 '10 at 17:00
2  
lamcro yes i know is installed by default but is disable by default sudo ufw status same happen with iptables is installed but is disable by default sudo iptables -L –  hhlp Oct 24 '10 at 17:05
add comment

it does.

Ubuntu has a firewall called UFW. By default its a command line utility, but there is a gui available -

sudo apt-get install gufw

Once this is installed it can be configured from System -> Administration -> Firewall Configuration.

It should be noted that if your running on a home network behind a router, you router will already be taking care of your firewall concerns.

As a general rule, it is best to only run one firewall at once, so consider switching off your Ubuntu firewall whilst running on your home network.

share|improve this answer
1  
IT should also be worth noting that UFW comes pre-disabled. "sudo ufw status" –  ThePhysician Oct 27 '10 at 0:04
add comment

The linux kernel itself has a command line accessible firewall that works barebone:

man iptables

This is usually used by the internet service providers, because it is very low on resources, but is very hard to configure (it requires advanced administrator skills).

share|improve this answer
add comment

you need a power full firewall in linux use iptables

firestarter Install firestater

Firestarter is an Open Source visual firewall program. The software aims to combine ease of use with powerful features, therefore serving both Linux desktop users and system administrators.

We strongly believe that your job is to make the high level security policy decisions and ours is to take care of the underlying details. This is a departure from your typical Linux firewall, which has traditionally required arcane implementation specific knowledge.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.