ferm VS ufw

ferm Reviews

ufw Reviews

ferm mentions (4)

• DHCP is not blocked by ufw/iptables

  I remember hating shorewall and similar ones because, well, I know iptables, and I know exactly what I want so using anything that tries to abstract it into it's own approach is torture as I need to take the rules I want and translate it to whatever mediocre paradigm shorewall (or ufw, or near-any other firewall manager in the wild) decided to put on top of iptables. I ended up using ferm... - Source: Hacker News / 9 months ago

• what is your favourite firewall frontend?

  I'm a big fan of ferm. Many major distros have it readily available as a package, and it makes for beautifully readable firewall definitions. Source: about 1 year ago

• anyone use a front-end to iptables?

  The last time I needed to do complex iptables stuff, I found FERM really helpful. The structured config language greatly reduces the amount of boilerplate code you have to type, while still having a pretty direct mapping to the emitted iptables rules. A bit like compiling sass to css. Source: about 2 years ago

• dog: An open source firewall management system for packs of firewalls (iptables)

  Also just about last thing I want is to deploy another configuration management system alongside the system that manages everything else on machine. Currently we just use Puppet to deploy ferm rules (which is best described as "iptables+", naming convention and such are still iptables-like but a lot of macros/syntax sugar around it). Source: almost 3 years ago

ufw mentions (4)

• Cannot install gufw in fedora37

  You may already know this, but gufw is simply a graphical front-end to the Uncomplicated Firewall (ufw) service. Fedora uses the Firewalld back-end service instead of ufw. I believe you would need to replace Firewalld with ufw entirely in order to make gufw a plausible solution. Source: about 1 year ago

• ufw --help is very bad

  I just started using ufw https://launchpad.net/ufw and I found that it only shows --help for the root command. Source: over 2 years ago

• why UFW is open-source and GUFW is proprietary ?

  Why do you think Gufw is proprietary? It's FOSS, licensed as GPL v3, as documented here. Source: almost 3 years ago

• Huge surge in hits to connectivitycheck.gstatic.com from my phone knocks out my PiHole

  Another option is to use UFW and rate limit incoming packets. Because it's a firewall, it will block the queries even before they hit Pi-hole, but it might be a tad more tricky to set up. I also don't know if you can set it as a limitation per client or only in general (per port/rule). I'll leave that for you to investigate further. Source: about 3 years ago