UFW

• Arch wiki
• Ubuntu wiki: UncomplicatedFirewall
• Ubuntu docs: UFW
• UbuntuFirewallSpec
• Debian trixie package still depends on iptables

Config

• /etc/ufw/

Usage

ufw status
ufw status verbose
ufw show raw

List installed application profiles:

ufw app list
ufw app info WWW

Delete rule:

ufw status numbered
ufw delete 1

Ansible

• community.general.ufw module
  • Part of community.general collection

Note that as ufw manages its own state, simply removing a rule=allow task can leave those ports exposed. Therefore manually remove it:

ufw delete reject 113/tcp