ufw ftw! Ubuntu 8.04's uncomplicated firewall

David M Williams
Wednesday, 02 April 2008 20:17

Opinion and Analysis

One of the major driving forces behind ufw was not, in fact, to simply make an uncomplicated firewall. Instead, the Ubuntu team recognised the value in having an integrated firewall and thus sought to create this.

What this means is that the firewall is linked with the package manager. If you install the Apache web server, for instance, the rules can be automatically added to ufw which will permit inbound web traffic. You don’t have to think to perform this step yourself. Conversely, if you remove Apache the package manager will tidy up after itself and block that port.

This really is a master stroke by Ubuntu in many ways.

Firstly, it gives ordinary regular users the ability to protect their systems without requiring a detailed knowledge of iptables. They have a syntax they can use which is easily grasped and which is memorable. People can be writing intelligent firewall rules within moments.

Secondly, security holes are diminished because the package manager tidies up after itself when uninstalling a package which provided a network service. You don’t have the risk of leaving unused ports open and this minimises the attack surface of your machine.

Thirdly, Ubuntu have given themselves another point of distinction between themselves and other Linux distros. When it comes to easy to configure – but robust and stable – network security and threat prevention Ubuntu have a feather in their cap. This said, if ufw does capture the hearts and minds of the Ubuntu user base it is likely not long before Red Hat and other major vendors provide a similar implementation in their own Linux variants.

Along with ufw, Ubuntu 8.04 – or Hardy Heron – has a rich suite of features. The inclusion of wubi makes trying out Linux even easier for Windows users than ever before, without any risk of blowing away disk partitions inadvertently. Updated versions of the kernel, Gnome and Xorg provide a modern windowing and graphics system and the inclusion of Firefox 3.0 means your web browsing requirements are right up to date.

Ubuntu have learned lessons from Gutsy Gibbon which was touted as being the Linux that your granny could use, but which failed to satisfy all users everywhere, particularly in regards wireless network drivers and some stability issues.

By contrast, Hardy Heron is shaping up to be more robust, more centred around the user and their needs, and more fully featured. Ubuntu 8.04 is scheduled for release this month and is considered a long-term release; Ubuntu commit to providing support for this version for several years to come.