summaryrefslogtreecommitdiffstats
path: root/network/ufw/README
blob: 54d8cd35bfda7553db1b1a15a568b64a94589d56 (about) (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Ufw (Uncomplicated Firewall) is program for managing a netfilter
firewall.  It provides a command line interface and aims to be
uncomplicated and easy to use.

Add the following code to /etc/rc.d/rc.local to start Ufw at boot time:

if [ -x /lib/ufw/ufw-init ]; then
  /lib/ufw/ufw-init start
fi

Ufw comes with a number of common application profiles.  Create
additional application profiles under /etc/ufw/applications.d.
Each profile should contain a list of rules which include a title,
description, and port(s) or port range.

A custom application profile should look similar to this:

[Application]
title=Application title
description=A description for the application.
ports=137,138/udp|139,445/tcp

Where xx.xx.xx.xx is the IP address of an external host, enable this
application profile by executing the following as root:

# ufw allow from xx.xx.xx.xx app Application