Table of Contents


What Is a Firewall, Really?

If you’re running a Linux system, one of the smartest things you can do is set up a firewall.

Think of a firewall as your computer’s security guard, quietly checking the traffic coming in and out, and deciding what’s allowed and what’s not.

It’s a simple concept, but it’s at the heart of keeping your system safe.

At its core, a firewall is a set of rules.

These rules tell your system which network connections to allow and which to block.

For example, you might want to let in web traffic (so you can browse or run a website) but block everything else.

Or maybe you only want to allow connections from certain IP addresses.

The firewall is your tool for making those decisions.

The Main Players: iptables, firewalld, and UFW(The Main Players: iptables, firewalld, and UFW)

Linux gives you a few ways to manage your firewall, and which one you use depends on your needs and your comfort level.

iptables is the classic tool. It’s powerful and flexible, but the commands can be a bit intimidating if you’re new.

firewalld is a newer, more user-friendly option that’s common on systems like Fedora and CentOS.

It uses zones and services to make things easier.

UFW (Uncomplicated Firewall) is, as the name suggests, designed to be simple.

It’s especially popular on Ubuntu.

No matter which tool you choose, the basic idea is the same: you’re setting rules about what traffic is allowed.


Best Practices

  • Default Deny: Start by denying all incoming connections, then
    allow only what you need

  • Keep SSH Open: If you use SSH to manage your system, make sure
    you allow it before enabling the firewall, or you might lock
    yourself out

  • Review Regularly: Check your firewall rules from time to
    time. Remove anything you no longer need

  • Log Traffic: Consider enabling logging so you can see what’s
    being blocked


Wrapping Up

Setting up a firewall on Linux doesn’t have to be complicated.

Whether you use UFW, firewalld, or iptables, the important thing is to take that first step and put some basic rules in place.

Your system will be much safer for it, and you’ll have peace of mind knowing you’re in control of who can connect.