Shorewall VS ufw

Shorewall Reviews

ufw Reviews

Shorewall mentions (6)

• DHCP is not blocked by ufw/iptables

  All mentioned items have side-channel borked firewall and route rules in the past. Some bugs intermittently silently block local daemon instances from (re)loading like magic (some bugs only happen when the system is brought up). If your daily tasks include something less borked, than consider yourself very lucky you live without systemd. If I recall, ufw was intended for simple workstation rule sets. Personally,... - Source: Hacker News / 9 months ago

• Life After Shorewall: Replacement Options?

  I've been using Shorewall for the last decade or so on everything from custom OpenWRT firewall/gateway solutions to servers running Debian or Ubuntu. It's great software that makes managing iptables/netfilter a breeze. Alas after many years, Mr. Eastep has retired and it doesn't appear the project is maintained by a new person or team. Source: about 1 year ago

• Tunneling private networked host to the internet through public-facing server?

  Shorewall (https://shorewall.org/) can do the job easily. Source: over 1 year ago

• How to hairpin a whole network segment?

  Despite administrating Linux machines since 1994, I have never really looked closely at iptables because I was using shorewall and the briefly firehol. Source: over 1 year ago

• dog: An open source firewall management system for packs of firewalls (iptables)

  You should just use https://shorewall.org/. Source: almost 3 years ago

ufw mentions (4)

• Cannot install gufw in fedora37

  You may already know this, but gufw is simply a graphical front-end to the Uncomplicated Firewall (ufw) service. Fedora uses the Firewalld back-end service instead of ufw. I believe you would need to replace Firewalld with ufw entirely in order to make gufw a plausible solution. Source: about 1 year ago

• ufw --help is very bad

  I just started using ufw https://launchpad.net/ufw and I found that it only shows --help for the root command. Source: over 2 years ago

• why UFW is open-source and GUFW is proprietary ?

  Why do you think Gufw is proprietary? It's FOSS, licensed as GPL v3, as documented here. Source: almost 3 years ago

• Huge surge in hits to connectivitycheck.gstatic.com from my phone knocks out my PiHole

  Another option is to use UFW and rate limit incoming packets. Because it's a firewall, it will block the queries even before they hit Pi-hole, but it might be a tad more tricky to set up. I also don't know if you can set it as a limitation per client or only in general (per port/rule). I'll leave that for you to investigate further. Source: about 3 years ago