Host Firewall Basics
It is recommended to use a simple host firewall and deny any incoming connections on all ports. For a Linux host OS like Debian, Ubuntu and Arch Linux, gufw provides a simple graphical user interface for the Uncomplicated Firewall program. 
How-to: Install and Configure a Firewall
The following steps install gufw on a Debian host.
1. Install gufw.
sudo apt-get update && sudo apt-get install gufw
2. Start gufw.
Unlock. Enter the password.
5. Check the settings.
By default, the settings should be
Incoming: Deny and
Although not recommended, users can add special firewall rules, use pre-configured options for common programs and services, or set other advanced options in gufw by following this guide.
For further information on firewalls, see here.
- Uncomplicated Firewall by itself only provides a command-line interface for managing the netfilter firewall. Iptables are used by the program for configuration.
- The firewall is disabled by default.
Whonix Host Firewall Basics wiki page Copyright (C) Amnesia <amnesia at boum dot org>
Whonix Host Firewall Basics wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <email@example.com>
This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code.
This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.
This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See Conditions for Contributions to Whonix, then Edit! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.