How to Manage Firewalld and UFW for Linux Security

Linux systems rely on firewalls to safeguard against unauthorized network access. These software barriers control network traffic, permitting or blocking data packets based on predefined rules. Operating primarily at the network layer, they manage both IPv4 and IPv6 packets. Rule sets, encompassing both built-in and user-defined parameters, govern each packet's fate.

Two prominent firewall management tools dominate the Linux landscape: Firewalld and UFW. This guide explores their functionalities and management techniques on contemporary Linux distributions.

Firewalld: Dynamic Firewall Management

Firewalld, a dynamic firewall manager, features prominently in distributions like RHEL, CentOS, and Fedora. Its user-friendly interface simplifies the management of firewall rules and network zones. It supports two configuration types:

• Permanent: Rules persist across reboots.
• Runtime: Temporary rules, lost upon system or service restarts.

Firewalld categorizes network traffic into zones (e.g., public, internal, trusted), applying distinct rule sets to each. Its configuration resides in:

• /usr/lib/firewalld: Default configurations (subject to system updates).
• /etc/firewalld: System-specific configurations (persistent across reboots and updates).

Managing Firewalld (RHEL-based Systems)

These commands control Firewalld on RHEL-derived distributions:

• Start: systemctl start firewalld
• Stop: systemctl stop firewalld
• Status: systemctl status firewalld
• State: firewall-cmd --state
• Enable at boot: systemctl enable firewalld
• Disable: systemctl disable firewalld
• Mask (prevent starting): systemctl mask firewalld
• Unmask: systemctl unmask firewalld

UFW: Uncomplicated Firewall Management

UFW (Uncomplicated Firewall) serves as the default firewall on Ubuntu and similar distributions. A simplified frontend for iptables, UFW streamlines firewall management for users who don't require iptables' full complexity.

Managing UFW (Debian-based Systems)

These commands manage UFW on Debian-based systems:

• Enable: sudo ufw enable
• Disable: sudo ufw disable
• Status: sudo ufw status

UFW Rule Management

Basic UFW commands:

• Allow a port (e.g., HTTP port 80): sudo ufw allow 80
• Deny a port: sudo ufw deny 80
• Allow SSH: sudo ufw allow ssh
• Delete a rule: sudo ufw delete allow 80
• Enable logging: sudo ufw logging on

Conclusion

This article provides a foundational understanding of Firewalld and UFW management on modern Linux systems. Both tools are crucial for network security, but cater to different user needs. Firewalld's dynamic capabilities and zone support suit advanced users and servers, while UFW's simplicity makes it ideal for desktop or lightweight server environments. Effective firewall usage is essential for securing any Linux system.

The above is the detailed content of How to Manage Firewalld and UFW for Linux Security. For more information, please follow other related articles on the PHP Chinese website!