Host Firewall Basics
Introduction[edit]
It is recommended to use a simple host firewall and deny any incoming connections on all ports. For a Linux host OS like Debian, Ubuntu and Arch Linux, gufw provides a simple graphical user interface for the Uncomplicated Firewall program. [1]
How-to: Install and Configure a Firewall[edit]
The following steps install gufw on a Debian host.
1. Install gufw.
sudo apt-get update && sudo apt-get install gufw
2. Start gufw.
gufw
3. Press Unlock. Enter the password.
4. Press Enabled. [2]
5. Check the settings.
By default, the settings should be Incoming: Deny and Outgoing: Allow.
Although not recommended, users can add special firewall rules, use pre-configured options for common programs and services, or set other advanced options in gufw by following this guide.
For further information on firewalls, see here.
References[edit]
License[edit]
Whonix Host Firewall Basics wiki page Copyright (C) Amnesia <amnesia at boum dot org>
Whonix Host Firewall Basics wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code.
This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.
Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See Wiki Comments Policy.
Please help in testing new features and bug fixes in Whonix.
This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See Conditions for Contributions to Whonix, then Edit! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.
Whonix is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Libre Software license as Whonix itself. (Why?)
Whonix is provided by ENCRYPTED SUPPORT LP. See Imprint.
Enable comment auto-refresher