\n<\/p>\n
In today’s digital landscape, securing your server is paramount. One effective way to enhance your Linux server\u2019s security is by configuring a host-based firewall. Firewalls act as a barrier between your server and potential threats from the outside world, allowing you to control incoming and outgoing traffic based on predetermined security rules.<\/p>\n
<\/p>\n
In this article, we will guide you through the process of configuring a host-based firewall on your Linux server using ufw (Uncomplicated Firewall)<\/strong>, which is user-friendly and designed for simplicity.<\/p>\n <\/p>\n <\/p>\n UFW<\/strong> stands for Uncomplicated Firewall and is a front-end for iptables, making it easier to configure as a host-based firewall. While iptables provides more advanced features and capabilities, UFW focuses on ease of use, making it suitable for beginners or those who prefer straightforward commands.<\/p>\n <\/p>\n <\/p>\n Before we begin, ensure that UFW is installed on your system. Most modern Linux distributions come with UFW pre-installed. You can check if it’s available by running:<\/p>\n <\/p>\n bash <\/p>\n If UFW is not installed, you can install it using the package manager of your distribution. For Ubuntu\/Debian, you can run:<\/p>\n <\/p>\n bash <\/p>\n For CentOS\/RHEL, UFW is not typically available by default, so you may want to switch to a different firewall solution like <\/p>\n <\/p>\n To enable UFW, run the following command:<\/p>\n <\/p>\n bash <\/p>\n This command will activate the UFW service, and from this point forward, all incoming traffic will be denied unless explicitly allowed.<\/p>\n <\/p>\n To check the status of UFW after activation, execute the command:<\/p>\n <\/p>\n bash <\/p>\n <\/p>\n UFW uses a simple command structure. Here are some of the basic commands to manage your firewall:<\/p>\n <\/p>\n <\/p>\n To allow specific incoming traffic, you can use the following command format:<\/p>\n <\/p>\n bash <\/p>\n For instance, to allow HTTP traffic (port 80):<\/p>\n <\/p>\n bash <\/p>\n Similarly, to deny traffic, use:<\/p>\n <\/p>\n bash <\/p>\n <\/p>\n Instead of specifying ports, you can also allow predefined services. For example:<\/p>\n <\/p>\n bash <\/p>\n To see a list of available application profiles:<\/p>\n <\/p>\n bash <\/p>\n <\/p>\n To view the currently active UFW rules, you can run:<\/p>\n <\/p>\n bash <\/p>\n For a more detailed view, use:<\/p>\n <\/p>\n bash <\/p>\n This command provides numbered rules, making it easier to manage them.<\/p>\n <\/p>\n <\/p>\n If you need to remove specific rules, you can either refer to the rule number or port:<\/p>\n <\/p>\n bash <\/p>\n or:<\/p>\n <\/p>\n bash <\/p>\n <\/p>\n UFW also offers logging capabilities to keep track of firewall events. You can enable logging with the following command:<\/p>\n <\/p>\n bash <\/p>\n Logs can usually be found in <\/p>\n <\/p>\n While UFW provides an excellent way to get started with firewall management, you can also add more advanced rules:<\/p>\n <\/p>\n Allowing specific IPs:<\/strong> To allow traffic from a specific IP, use:<\/p>\n <\/p>\n bash \n<\/li>\n <\/p>\n Allowing subnets:<\/strong><\/p>\n <\/p>\n bash \n<\/li>\n \n<\/ul>\n <\/p>\n <\/p>\n While UFW helps enforce network security, consider combining it with other security measures:<\/p>\n <\/p>\n <\/p>\n <\/p>\n \n<\/ul>\n <\/p>\n <\/p>\n Configuring a host-based firewall like UFW on your Linux server is a critical step toward enhancing your security posture. By controlling which services and ports are accessible, you can significantly reduce your exposure to potential threats. <\/p>\n <\/p>\n With the simple commands provided, managing your firewall should be straightforward, allowing you to focus more on serving your application effectively while keeping security at the forefront.<\/p>\n <\/p>\n For more insights and tips about Linux server management and security practices, stay tuned to WafaTech Blog!<\/p>\n\n","protected":false},"excerpt":{"rendered":" In today’s digital landscape, securing your server is paramount. One effective way to enhance your Linux server\u2019s security is by configuring a host-based firewall. Firewalls act as a barrier between your server and potential threats from the outside world, allowing you to control incoming and outgoing traffic based on predetermined security rules. In this article, […]<\/p>\n","protected":false},"author":2,"featured_media":2686,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[22],"tags":[391,408,1493,265,266],"class_list":["post-2685","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux-security","tag-configuring","tag-firewall","tag-hostbased","tag-linux","tag-server","et-has-post-format-content","et_post_format-et-post-format-standard"],"yoast_head":"\nWhat is UFW?<\/h2>\n
Installing UFW<\/h2>\n
\nsudo ufw status<\/p>\n
\nsudo apt update
\nsudo apt install ufw<\/p>\nfirewalld<\/code> or install UFW from EPEL (Extra Packages for Enterprise Linux). <\/p>\nEnabling UFW<\/h2>\n
\nsudo ufw enable<\/p>\n
\nsudo ufw status verbose<\/p>\nBasic UFW Commands<\/h2>\n
Allowing and Denying Ports<\/h3>\n
\nsudo ufw allow
\nsudo ufw allow 80\/tcp<\/p>\n
\nsudo ufw deny Allowing Services<\/h3>\n
\nsudo ufw allow ssh
\nsudo ufw allow http
\nsudo ufw allow https<\/p>\n
\nsudo ufw app list<\/p>\nChecking the Status of UFW<\/h3>\n
\nsudo ufw status<\/p>\n
\nsudo ufw status numbered<\/p>\nDeleting Rules<\/h3>\n
\nsudo ufw delete
\nsudo ufw delete allow 80\/tcp<\/p>\nLogging with UFW<\/h2>\n
\nsudo ufw logging on<\/p>\n\/var\/log\/ufw.log<\/code>. <\/p>\nAdvanced Configurations<\/h2>\n
<\/p>\n
\nsudo ufw allow from
\nsudo ufw allow from <SUBNET\/CIDR><\/p>\nAdditional Security Measures<\/h2>\n
<\/p>\n
Conclusion<\/h2>\n