UFW Off

[stebo12]

-Linux Mint Mate 16 64bit
-Regular desktop use
-I am behind a router

UFW firewall seems to be off by default. Would you recommend turning it on or leaving it off?

[OrangeCrate]

Personally, I have it enabled.

If you decide you want it, it's easy to do. At the command line...

Enable it:

Code: Select all

sudo ufw enable

Check that it worked:

Code: Select all

sudo ufw status

Here's the documentation. It should answer most if not all of any questions your might have. Do please note, that for most users, the default setup is fine for every day use:

https://help.ubuntu.com/community/UFW

[stebo12]

I usually turn it on, but this time I was debating whether the firewall is a performance hog or not AND whether I actually needed it?

Thanks.

[JCW2]

Personally, I have it enabled...

Not sure about the OP, but I'm a Newbie running Maya Cinnamon (32-bit), so far only from a boot DVD and only through the GUI (also behind a router but paranoid). In the GUI the firewall appears to have only an inbound and an outbound on/off switch. Am I assuming correctly that the preferred settings would be inbound ON and outbound OFF? (Presumably that would use the default rules for inbound. I suppose turning outbound ON would deny everything?)

Or are there other choices offered by the GUI that I missed? -- JCW2

[gold_finger]

Am I assuming correctly that the preferred settings would be inbound ON and outbound OFF?

Just the opposite. Incoming = Deny; Outgoing = Allow.
This will deny requests to connect to your computer from the internet unless it is in response to a connection your computer initiated -- eg. Firefox browser requesting a page to view. Random attempts from the internet to connect to your computer will be denied. Outgoing = Allow lets you connect when you try -- again FF browser trying to get online as an example.

[TheDynamicHamza21]

Personally, I have it enabled...

Not sure about the OP, but I'm a Newbie running Maya Cinnamon (32-bit), so far only from a boot DVD and only through the GUI (also behind a router but paranoid). In the GUI the firewall appears to have only an inbound and an outbound on/off switch. Am I assuming correctly that the preferred settings would be inbound ON and outbound OFF? (Presumably that would use the default rules for inbound. I suppose turning outbound ON would deny everything?)

Or are there other choices offered by the GUI that I missed? -- JCW2

It is well known that the GUI (Gufw) doesn't work as intended. Even if you enable UFW using the GUI,Gufw it will display UFW is disabled everytime you restart your computer,even though it is indeed enabled. That's why most linux users just use "sudo ufw enable" rather the gufw. Set it and forget it. Unless you have particular needs you just set once and don't worry about it.

[stebo12]

Personally, I have it enabled...

Not sure about the OP, but I'm a Newbie running Maya Cinnamon (32-bit), so far only from a boot DVD and only through the GUI (also behind a router but paranoid). In the GUI the firewall appears to have only an inbound and an outbound on/off switch. Am I assuming correctly that the preferred settings would be inbound ON and outbound OFF? (Presumably that would use the default rules for inbound. I suppose turning outbound ON would deny everything?)

Or are there other choices offered by the GUI that I missed? -- JCW2

It is well known that the GUI (Gufw) doesn't work as intended. Even if you enable UFW using the GUI,Gufw it will display UFW is disabled everytime you restart your computer,even though it is indeed enabled. That's why most linux users just use "sudo ufw enable" rather the gufw. Set it and forget it. Unless you have particular needs you just set once and don't worry about it.

I've been told a good answer on the Gufw and the reason why it shows disabled. When you check your firewall status via the gufw, it will show 'Off' because you do not have root access to view the 'status' of the firewall...so when you use the 'unlock' button in the GUI, the 'status' becomes available and shows "On". So I believe it is working as intended, you only need root access to view the firewall status.

[JCW2]

Thanks to all for useful explanations! -- JCW2