Skip to content

UFW Profiles

UFW Profiles

pre-commit enabled Black codestyle

A collection of application profiles for the Uncomplicated FireWall (UFW).

📚 Documenation

Documentation is hosted with GitHub Pages and can be found at:

🚀 Usage

Assuming you have ufw enabled and installed the profiles contained within this repository can be dropped into /etc/ufw/applications.d/ and simply enabled with sudo ufw allow {profile name}.

Some things worth considering:

  • Limiting access certain IP ranges.
  • Limiting access to certain interfaces.

IP Range Limiting (CIDR notation)

Bash
sudo ufw allow from 192.168.0.0/24 to any app avahi
sudo ufw allow to 192.168.0.0/24 from any app avahi

Limiting access to a specific interface

Bash
sudo ufw allow in on enp0s2 to any app avahi
sudo ufw allow out on enps0 from any app avahi