Linux Certif

Toute la documentation sur la certification Linux LPI

gufw

NAME

Gufw - Graphic user interface for managing ufw

DESCRIPTION

Gufw is an easy to use firewall, powered by ufw (which is an easy to use firewall itself). ufw is stands for Uncomplicated Firewall, and is program for managing a netfilter firewall. It provides a command line interface and aims to be uncomplicated and easy to use. Gufw is here to provide a GUI for the ufw, so it can be even easier to use! iptables is already a very powerful tool by itself, but it's syntax can get awkward at times and hard to figure out, so Ubuntu developers decided to make ufw ("The reason ufw was developed is that we wanted to create a server-level firewalling utility that was a little bit more for `human beings`."), which was to be simpler. Now, on the graphical side of things, Firestarer already existed. But why not make an even easier to use GUI for desktop `human beings`, powered by ufw? This is where Gufw comes in. Once configured it will stay that way, so you don't need to be running Gufw on your desktop all the time!

RUN

You can run Gufw in GNOME menu: /System/Administration/Firewall configuration

USAGE

BASIC SETTINGS

Gufw has two states: Enabled and disabled. When Gufw is enabled, you can allow/deny all incoming connections.

ADD SIMPLE RULE(S)

You can specify the port or service, and protocol to be allowed (allow traffic), denied (deny traffic) on the host, or limit an IP or Port (Protecting against brute-force login attacks). The port can be a number of 5 digits, from 1 to 65535. The service can be any of /etc/services file (By example tcpmux, echo, discard, systat...). The protocol can be:
   1. tcp: Apply rule for all traffic in protocol tcp.
   2. udp: Apply rule for all traffic in protocol udp.
   3. both: Apply rule for all traffic in protocol tcp and udp.
   

ADD PRECONFIGURED RULE(S)

You can select between more Programs and Services preconfigured. Only one Program/Service can have multiples rules.

ADD ADVANCED RULE(S)

You can add an advanced rule. You can specify:
   1. Protocol: tcp, udp or both.
   2. From IP Addres: You can allow/deny/limit traffic from IP address. This parameter is optional or you can use "Any". Example for a range: 192.168.1.0/9
   3. From Port: You can allow/deny/limit traffic from a port. This parameter is optional. The port can be a number of 5 digits, from 1 to 65535
   4. To IP Addres: You can allow/deny/limit traffic to an IP address. This parameter is optional or you can use "Any". Example for a range: 192.168.1.0/9
   5. To Port: You can allow/deny/limit traffic to a Port. This parameter is optional. The port can be a number of 5 digits, from 1 to 65535
   6. Second Port: If you set a number, you will use a range

REMOVE ONE RULE

Steps:
   1. Select a rule in the list.
   2. Click in Remove button. You can delete more rules, if the others was been added at the same time.

REMOVE ALL RULES

Steps:
   1. Click in Select all button.
   2. Click in Remove button. You will delete the actives rules.

DENY RULES FROM FILE

You can add deny rules from IP. In the File menu, you have got the "Add deny rules" option. You will not overwrite current rules. You will import new rules only. The file must has this format: http://www.bluetack.co.uk Generic_text:IP-Generic_text Example: Tor:192.192.193.123-192.192.193.123

IMPORT/EXPORT RULE(S)

You can import/export the currently rules from/to file. In the File menu, you have got the options. You will not overwrite current rules. You will import new rules only.

EDIT PREFERENCES

You can edit your preferences in /Edit/Preferences menu. Preferences:
   1. Register Gufw log: You will have got a log of all operations of Gufw.                     

   2. ufw log enabled: You will enable/disable the ufw log.
   3. Minimize to tray on close: When you close the application, it will placed in the tray, or closed the program.

   4. Autostart with session: Gufw start with the system when you reboot. It will ask you the root password. REMEMBER: Once configured it will stay that way, so you don't need to be running Gufw on your desktop all the time!

TRAY ICON

With the tray icon, you can know the Gufw status in any time. Tray Icon Events
   1. Left mouse click: Show/hide Gufw window.
   2. Right mouse click: Popup with options:
         1. Enable/disable firewall.
         2. About dialog.
         3. Close Gufw. REMEMBER: Once configured it will stay that way, so you don't need to be running Gufw on your desktop all the time!

NOTES

REMEMBER: Once configured it will stay that way, so you don't need to be running Gufw on your desktop all the time!

SEE ALSO

ufw(8)

AUTHOR

Gufw is (C) 2008, Marcos Alvarez Costales.

This manual page was originally written by Marcos Alvarez Costales <marcos.alvarez.costales@gmail.com>