1024 Tool Box/Command Generators/ufw Command Generator

ufw Command Generator

Generate ufw commands to manage the Uncomplicated Firewall on Ubuntu/Debian

Getting Started with ufw

## What is ufw?

`ufw` (Uncomplicated Firewall) is a friendly front-end to iptables/ufw shipped with Ubuntu and Debian. It hides raw chain syntax behind simple verbs like `allow` and `deny`. Rules take effect immediately and persist across reboots once ufw is enabled.

## How to Use

1. **Enable the firewall**: Run `ufw enable` once (the default policy denies incoming, allows outgoing). 2. **Pick an action**: `allow`, `deny`, `reject`, `delete`, `status`, `enable`, `disable`, `reload`, or `reset`. 3. **Add a rule**: For `allow`/`deny`/`reject`, specify a port (optionally with `/tcp` or `/udp`) and/or a source with `from`. 4. **Copy & Run**: Prefix with `sudo`.

Common Actions & Rules

### `allow` / `deny` / `reject` Open or close access. `deny` silently drops packets; `reject` responds with an ICMP error so the client fails fast.

### `status` Show the current rule set. `ufw status verbose` adds the default policy and logging level.

### `enable` / `disable` / `reload` / `reset` `enable` activates the firewall at boot; `disable` turns it off; `reload` re-reads the rules; `reset` wipes all rules back to defaults.

### Port with protocol `ufw allow 80/tcp` opens TCP port 80. Omit the suffix to allow both TCP and UDP.

### `from` Source restriction Limit a rule to a source IP or CIDR: `ufw allow from 192.168.1.0/24` or `ufw allow from 10.0.0.5 to any port 22`.

### `delete` Remove a rule Repeat an existing rule prefixed with `delete` (`ufw delete allow 80/tcp`), or use numbered mode (`ufw status numbered` then `ufw delete 3`).

▶What is the difference between ufw and iptables?

`ufw` is a wrapper that generates iptables rules from simple commands. It covers the common cases (allow/deny a port, restrict by source) but cannot express everything iptables can — raw chain manipulation, marking, NAT tables, custom chains. Use `ufw` for everyday host firewalls and drop down to `iptables` or `nft` for advanced setups.

▶How do I allow SSH before enabling the firewall?

Always allow SSH first to avoid locking yourself out: `sudo ufw allow 22/tcp` then `sudo ufw enable`. Verify with `sudo ufw status`.

▶How do I delete a rule?

Either repeat the original rule prefixed with `delete` (`sudo ufw delete allow 80/tcp`) or use numbered mode: `sudo ufw status numbered`, then `sudo ufw delete 3` to remove rule #3.

If this tool has been helpful to you, consider buying me a coffee.

Buy me a coffee

You might also need

dig Command Generator grep Command Generator tar Command Generator netstat Command Generator systemctl Command Generator sort Command Generator ps Command Generator rsync Command Generator

ufw Command Generator

Getting Started with ufw

Common Actions & Rules

You might also need

Comments