==== UFW ====
ufw is the default firewall in Ubuntu based system and is also available on the Raspberry-Pi.

=== Install UFW ===
<code bash>
apt install ufw
</code>

=== Examples ===
== Allow SSH ==
<code bash>
ufw allow ssh
</code>

== List Rules ==
<code bash>
ufw status
</code>
if no rules are defined only the run status is shown.

== Enable UFW ==
<code bash>
ufw enable
</code>
make sure SSH is allowed, if you're using a remote session!

== Disable UFW ==
<code bash>
ufw disable
</code>

== List available app rules ==
<code bash>
ufw app list
</code>

== Show details for app rule ==
<code bash>
ufw info DNS
</code>
<code>
Profile: DNS
Title: Internet Domain Name Server
Description: Internet Domain Name Server

Port:
  53
</code>

== Move rule ==
<code>
root@pitomb:~# ufw status numbered
Status: active

     To                         Action      From
     --                         ------      ----
[ 1] 22/tcp                     ALLOW IN    Anywhere
[ 2] 80/tcp                     ALLOW IN    Anywhere
[ 3] 443/tcp                    ALLOW IN    Anywhere
[ 4] DNS                        ALLOW IN    Anywhere
[ 5] 53                         DENY IN     10.60.2.95
[ 6] 22/tcp (v6)                ALLOW IN    Anywhere (v6)
[ 7] 80/tcp (v6)                ALLOW IN    Anywhere (v6)
[ 8] 443/tcp (v6)               ALLOW IN    Anywhere (v6)
[ 9] DNS (v6)                   ALLOW IN    Anywhere (v6)
</code>

<code>
root@pitomb:~# ufw delete 5
Deleting:
 deny from 10.60.2.95 to any port 53
Proceed with operation (y|n)? y
Rule deleted
</code>

<code>
root@pitomb:~# ufw status numbered
Status: active

     To                         Action      From
     --                         ------      ----
[ 1] 22/tcp                     ALLOW IN    Anywhere
[ 2] 80/tcp                     ALLOW IN    Anywhere
[ 3] 443/tcp                    ALLOW IN    Anywhere
[ 4] DNS                        ALLOW IN    Anywhere
[ 5] 22/tcp (v6)                ALLOW IN    Anywhere (v6)
[ 6] 80/tcp (v6)                ALLOW IN    Anywhere (v6)
[ 7] 443/tcp (v6)               ALLOW IN    Anywhere (v6)
[ 8] DNS (v6)                   ALLOW IN    Anywhere (v6)
</code>
<code>
root@pitomb:~# ufw insert 1 deny from 10.60.2.95 to any port 53
Rule inserted
</code>
<code>
root@pitomb:~# ufw status numbered
Status: active

     To                         Action      From
     --                         ------      ----
[ 1] 53                         DENY IN     10.60.2.95
[ 2] 22/tcp                     ALLOW IN    Anywhere
[ 3] 80/tcp                     ALLOW IN    Anywhere
[ 4] 443/tcp                    ALLOW IN    Anywhere
[ 5] DNS                        ALLOW IN    Anywhere
[ 6] 22/tcp (v6)                ALLOW IN    Anywhere (v6)
[ 7] 80/tcp (v6)                ALLOW IN    Anywhere (v6)
[ 8] 443/tcp (v6)               ALLOW IN    Anywhere (v6)
[ 9] DNS (v6)                   ALLOW IN    Anywhere (v6)
</code>