Host Firewall Basics

Introduction

It is recommended to use a simple host firewall and deny any incoming connections on all ports. For a Linux host OS like Debian, Ubuntu and Arch Linux, gufw provides a simple graphical user interface for the Uncomplicated Firewall program.

How-to: Install and Configure a Firewall

The following steps install gufw on a Debian host.

1. Install gufw.

[select code]

sudo apt-get update && sudo apt-get install gufw

sudo apt-get update && sudo apt-get install gufw

2. Start gufw.

[select code]

gufw

gufw

3. Press Unlock. Enter the password.

4. Press Enabled.

5. Check the settings.

By default, the settings should be Incoming: Deny and Outgoing: Allow.

Although not recommended, users can add special firewall rules, use pre-configured options for common programs and services, or set other advanced options in gufw by following this guide.

For further information on firewalls, see here.

License

Whonix Host Firewall Basics wiki page Copyright (C) Amnesia <amnesia at boum dot org>
Whonix Host Firewall Basics wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>

This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code.
This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.

---

Random News:

Bored? Want to chat with other Whonix users? Join us in IRC chat (Webchat).

---

https | (forcing) onion

Share: Twitter | Facebook

This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See Conditions for Contributions to Whonix, then Edit! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.

Whonix is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Libre Software license as Whonix itself. (Why?)