Operation and Maintenance
Linux Operation and Maintenance
How to enable the UFW firewall on Ubuntu Linux
How to enable the UFW firewall on Ubuntu Linux
Enable UFW to secure Ubuntu by first checking status with sudo ufw status, then activating it via sudo ufw enable which blocks incoming and allows outgoing traffic by default; optionally set policies like sudo ufw default deny incoming and allow essential services such as SSH, HTTP, and HTTPS using sudo ufw allow commands to prevent lockout and ensure connectivity.
Enabling the UFW (Uncomplicated Firewall) on Ubuntu Linux is a straightforward process designed to simplify firewall configuration for users who don't need complex rules. By default, UFW is installed but disabled on most Ubuntu systems. Here's how to enable and configure it properly.
Check UFW Status
Before making changes, verify whether UFW is already active.
sudo ufw statusIf the output shows inactive, you can proceed with enabling it. If it's already active, review your current rules to avoid conflicts.
Enable UFW
To turn on the firewall with default settings (which deny incoming connections and allow outgoing ones), run:
sudo ufw enableThis command activates the firewall immediately and sets it to start automatically at boot. You'll see a message confirming that the firewall is active.
Set Default Policies (Optional but Recommended)
UFW comes with sensible defaults, but you can explicitly define them:
- Deny all incoming traffic: sudo ufw default deny incoming
- Allow all outgoing traffic: sudo ufw default allow outgoing
These settings are typically safe for desktops or servers where you want to block unsolicited incoming connections while allowing programs on your system to communicate outward.
Allow Essential Services
After enabling UFW, make sure to allow necessary services like SSH, HTTP, or HTTPS so you don’t get locked out.
- SSH (port 22): sudo ufw allow ssh or sudo ufw allow 22
- HTTP (port 80): sudo ufw allow http or sudo ufw allow 80
- HTTPS (port 443): sudo ufw allow https or sudo ufw allow 443
If you're managing a remote server, allowing SSH is critical to maintain access after enabling the firewall.
Once everything is set, check the active rules with:
sudo ufw status verboseBasically just enable UFW, set basic policies, and permit required services. It’s simple but effective for securing your Ubuntu system.
The above is the detailed content of How to enable the UFW firewall on Ubuntu Linux. For more information, please follow other related articles on the PHP Chinese website!
Hot AI Tools
Undress AI Tool
Undress images for free
AI Clothes Remover
Online AI tool for removing clothes from photos.
Undresser.AI Undress
AI-powered app for creating realistic nude photos
ArtGPT
AI image generator for creative art from text prompts.
Stock Market GPT
AI powered investment research for smarter decisions
Hot Article
Popular tool
Notepad++7.3.1
Easy-to-use and free code editor
SublimeText3 Chinese version
Chinese version, very easy to use
Zend Studio 13.0.1
Powerful PHP integrated development environment
Dreamweaver CS6
Visual web development tools
SublimeText3 Mac version
God-level code editing software (SublimeText3)
Hot Topics
20518
7
13631
4
How to manage software packages using Dnf and Rpm in Linux?
Mar 07, 2026 am 01:50 AM
dnfinstall prompts packagenotfound because it queries the enabled warehouse rather than the local installation status; rpm-q queries the local RPM database, and the scopes of the two are different.
How to monitor system performance and resources in Linux? (Top & Htop)
Mar 06, 2026 am 01:04 AM
The total top CPU usage is not 100% because it is calculated based on a single core, and the maximum is 800% for an 8-core system; the htop terminal size error needs to be fixed with eval$(resize); the real memory pressure is available rather than used; top command line truncation can be solved with the -c parameter.
How to setup file sharing using Samba on Linux? (SMB Protocol)
Mar 13, 2026 am 12:33 AM
The main reason why Windows cannot see the Samba share is that the firewall blocks UDP137–139/TCP445 or NetBIOS name resolution fails; it is necessary to confirm that the workgroup is consistent, the interfaces are configured correctly, the file permissions match forceuser/forcegroup, and set doscharset=UTF-8 to solve Chinese garbled characters.
How to extend a Logical Volume (LVM) in Linux without downtime?
Mar 13, 2026 am 12:53 AM
Logical volumes and file systems can be expanded online. You need to expand the LV first and then the file system. It is recommended to use lvextend-r for automatic synchronization adjustment, but you must ensure that the LVM and file system tool versions are compatible.
How to check open ports and listening services in Linux? (Netstat & SS)
Mar 10, 2026 am 01:08 AM
Netstat displays fewer LISTEN ports than ss because it does not display process information by default that non-root users do not have access to; ss can read all listening sockets by default without process names, and sudonetstat-tulpn is required to display them completely.
How to set up SSH key authentication on Linux? (Passwordless Login)
Mar 11, 2026 am 12:46 AM
It is recommended to use ssh-keygen-ted25519 to generate a key pair, because it is faster, more secure, and has a shorter key than the default RSA; it is necessary to strictly set the ~/.ssh directory permissions to 700 and authorized_keys to 600, and use ssh-v to confirm whether the client is Offering public key and whether the server rejects it.
How to format disk partitions using the command line in Linux?
Mar 15, 2026 am 12:01 AM
When fdisk is stuck at the Command prompt, it is normally waiting for input. Enter q to exit safely; you must umount before mkfs, otherwise it may fail silently; partedmkpart does not support the specified file system type, and mkfs needs to be executed separately.
How to configure a static IP address on Linux? (Netplan & NetworkManager)
Mar 14, 2026 am 12:02 AM
Netplan reports "InvalidYAML" when configuring a static IP due to indentation errors, missing spaces after colons, or mixed tabs; gateway4 has been deprecated and routes to:default must be used instead; NetworkManager needs to be modified before down/up takes effect; the renderer field is used to determine the backend during coexistence; incorrect DNS configuration will cause ping to succeed but curl to fail.
