UFW KControl Module
System Software
Score 76%
Description:

This is a KDE control center module to configure and control the Uncomplicated Firewall, as shipped with Kubuntu 10.10. The following features are supported:

1. Enable/disable firewall
2. Configure firewall default settings
3. Add, edit, and remove rules
4. Re-order rules via drag\'n\'drop
5. Import/export of rules
6. Setting of some IP tables modules

The module will appear under "Network and Connectivty" category.

**NOTE** 0.4.2 requires UFW 0.31 (as shipped with Kubuntu 12.04). For UFW 0.30 (as shipped with Kubuntu 11.10) please use 0.4.1
Last changelog:

6 years ago

0.4.3
-----
1. Actually get this to work with Kubuntu 12.04!!!

0.4.2
-----
1. Add support for UFW 0.31 - thanks to ufw-frontends author Darwin Baustista for very kindly supplying a patch.

0.4.1
-----
1. Fix loading of profiles.

0.4.0
-----
1. Add a simple log file viewer.
2. Save profiles into /etc/kcm_ufw - this way they are system-wide.
3. Store rule descriptions in etc/kcm_ufw, as they are part of this kcm, not ufw itself.
4. Block further actions, until current one is complete.
5. Set size of policy combos in simple and advanced pages to the same size - to mimimize flicker. (Not sure why they have different sizes.)
6. Make text field of simple port the same size as the combo.
7. Change column order of rules list to "Action, From, To, ..."
8. Make 'Add Rule' dialog non-modal, so that 'Log Viewer' and 'Add Rule' can be used concurrently.
9. Shorten IPv6 address - if possible.
10. Fix selection of host radio when editing rules.
11. Fix installation of JPEG files for Spanish documentation.
12. Default to installing all translations.

Rebelyouth

5 years ago

Hi,
compliment for the Kde module is really good!


Are you think to include in the new version :

Listening port and Dbus notification ?

That two would be great!!!!

Thanks again for this great Kde module

PS I created a Debian Sid package on my site rebelyouth.wordpress.com feel free to download

Report

Rebelyouth

5 years ago

The only thing wrong is :

Load Profile doesn't work

I tried to change permission to the file and also to run System Setting from root but still nothing

Report

mavron

5 years ago

Hi.
I've compiled and installed it on a Kubuntu 11.10, and it looks like a pretty nice project.
Nevertheless, it seems that I can't load profiles.
I've created 4 of them, they're correctly stored in /etc/kcm_ufw and I can see them in the drop down box (KCM -> Firewall -> Profiles -> Load Profile).
Anyway, when I click on one of them, nothing happens.

I've also tried to play with the python helper, but it doesn't seem to have a loadprofile option, and the others (add, update, setDefaults) just don't do the job.

Any idea?
Thx,
mav

PS
Heres one of the profiles:
Quote:
-> cat /etc/kcm_ufw/03_SomeService_\(SSH\,FTP\,HTTP\,HTTPS\,8080\,8443\).ufw
<ufw full="true" >
<defaults ipv6="no" loglevel="low" incoming="deny" outgoing="allow"/>
<rules>
<rule direction="in" v6="False" action="allow" descr="IN - Torrent" logtype="" dport="6882" hash="cd5e57462c0c877534df7ad53ef1caa5"/>
<rule protocol="tcp" direction="in" v6="False" action="allow" descr="IN - Torrent" logtype="" dport="6881" hash="1c3401adc6f71ef56a3280dbf33ef635"/>
<rule protocol="udp" direction="in" v6="False" action="allow" descr="IN - Torrent" logtype="" dport="4444" hash="91939fc508416200a8c51019980b92e1"/>
<rule direction="in" v6="False" action="allow" logtype="" dport="21"/>
<rule direction="in" v6="False" action="allow" logtype="" dport="80"/>
<rule direction="in" v6="False" action="allow" logtype="" dport="443"/>
<rule protocol="tcp" direction="in" v6="False" action="allow" descr="IN - 8080" logtype="" dport="8080" hash="3ffe6c2e0230196441eb4e752e041923"/>
<rule protocol="tcp" direction="in" v6="False" action="allow" descr="IN - 8443" logtype="" dport="8443" hash="5e3791634d466b6be8e42e180c7c784e"/>
</rules>
<modules enabled="nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns" />
</ufw>

Report

mck182

6 years ago

I have compiled & installed this kcm module, but I can't actually change the configuration. At the bottom it says "Querying firewall status..." and all the controls are disabled. Also console output shows no usable info. Both ufw and iptables are installed. Am I missing something else?

Report

C

CraigD

6 years ago

Did you install this into the kde-prefix? What happens if you run:

/usr/lib/kde4/libexec/kcm_ufw_helper.py --status --defaults --list --modules

Report

mck182

6 years ago

Yes,it was indeed path problems. I'm using Project Neon, which sets the paths to /opt, but dbus and possibly polkit files must be placed to /usr. That way it works, thanks :)

Report

TommyCZ

6 years ago

Hi, I realized that some packages are missing, may be it would be good idea to create a list of them, so a user, with fresh installed Kubuntu, can download them.

Report

C

CraigD

6 years ago

Uh?? What packages?

Report

kubicle

6 years ago

First of all, thanks for the great module.

At least on my machine, kcm_ufw_helper/kdebug seems to create a file /.kde/share/config/kdebugrc
(that's .kde under the root directory), contents:
[kcm_ufw_helper]
InfoOutput=4

I'm guessing that should be added to /root/.kde/share/config/kdebugrc

Not sure if this is a universal bug, though.

Details of my setup:
Kubuntu Oneiric Ocelot (devel version)
UFW Kcontrol module 0.2.1 (built from source)

Report

C

CraigD

6 years ago

Odd... I dont see this. The helper does not explicitly create any KDE related files, but it does use KDebug - perhaps this is causing the issue?

Can you try editing helper.cpp and replace:

#include <KDE/KDebug>

with:

#include <QtCore/QDebug>

and then replace all "kDebug()" with "qDebug()". Recompile, etc, and see if this fixes the issue? Thanks.

Report

C

CraigD

6 years ago

OK, I spoke too soon! Re-read your comment, and yup its seems to create /.kde/share/... for me too. I think this is a bug in the KAuth code, but changing to use qDebug() works around this. I'll add this fix to the next release. Thanks for reporting. You should probably create a KDE bug report about this.

Report

kubicle

6 years ago

Thanks for the quick response.

KAuth seems a likely canditate as I seem to also have /.config/Trolltech.conf that lists kauth plugins and nothing else.

There could be something in KAuth that confuses / and /root. I'll take a look if I can make any sense of it (unlikely) and possibly file a bug at BKO (I hate to write vague bug reports like the one I wrote for you ;), I mainly wanted to confirm it wasn't a local issue)

Report

TommyCZ

6 years ago

Hi, the problem with games occured. I compiled it, enabled firewall, tried to play HeroesOfNewerth but it couldn't login. So I realised that some ports are needed to be enabled to run this game. BUT. With 80 (login/update), 11031 (chatserver) were no problems but this game also need to open a range of ports 11235-11335 (game servers) which is impossible in your frontend for ufw.
Also if I disabled it (firewall), the HoN couldn't run. So I had to install Gufw and disable it from it, after that, HoN worked.

Report

C

CraigD

6 years ago

You can specify a range using "11235:11335". I've just tested this, and it works. This can be confirmed by tyeping "sudo ufw status" from a commandline - if ufw is enabled (when its disabled the commandline does not show the rules)

Also, un-checking the "Firewall status" checkbox disables UFW. Again, tyeping "sudo ufw status" from a commandline will confirm this.

Which version of Kubuntu are you on? I started with 10.10, but am now on 11.04

Report

dgvirtual

6 years ago

This is a great utility!

I installed a package for Ubuntu Natty on a Maverick system, so the placement of the kcm module might be outdated, but it is strange that the module is placed as a separate entry under "System administration" heading.

I think it is network related, so it should perhaps go under "Network and Connection " heading and perhaps – under "Network Settings"?

Report

C

CraigD

6 years ago

I agree, it should be under "Network and connectivity" - probably within "Network settings", but I'm not 100% sure...

Report

YAFU

6 years ago

Compiling with the instructions in the README file can not access the Firewall settings from SystemSettings because the files are installed in /usr/local/lib/kde4 (Kubuntu 10.10 KDE 4.6)
Compiling as you said in an earlier comment it works (in /usr/lib/kde4)
Thanks.

Report

YAFU

6 years ago

This is an old comment for v0.0.3. In newer versions you follow the README file instructions.

Report

Amnon82

6 years ago

Hi there. I just added it to my Distribution. Thx for the UI. The file to build it also for Archlinux you can find here:

http://gitorious.org/chakra-packages/apps/blobs/master/kcm-ufw/PKGBUILD

I had to hack the install destination folder to fit our chroot buildsystem ...

Report

SilentDis

6 years ago

The README file has no install info.
There is no INSTALL file.

Report

C

CraigD

6 years ago

Oops! Sorry. Its a standard CMake based project, so:

1. cmake . -DCMAKE_INSTALL_PREFIX=/usr
2. make
3. sudo make install

Report

YAFU

6 years ago

Is this a separate project to ufw-kde (https://launchpad.net/ufw-kde)?
Anyway I think it is better to control the firewall via a module like yours.
Thanks.

Report

C

CraigD

6 years ago

Never noticed that - I saw GUfw and ufw-frontends. Anyway, looking at ufw-kde there doesn't seem to be *anything* there.

Report

6 years ago

0.4.3
-----
1. Actually get this to work with Kubuntu 12.04!!!

0.4.2
-----
1. Add support for UFW 0.31 - thanks to ufw-frontends author Darwin Baustista for very kindly supplying a patch.

0.4.1
-----
1. Fix loading of profiles.

0.4.0
-----
1. Add a simple log file viewer.
2. Save profiles into /etc/kcm_ufw - this way they are system-wide.
3. Store rule descriptions in etc/kcm_ufw, as they are part of this kcm, not ufw itself.
4. Block further actions, until current one is complete.
5. Set size of policy combos in simple and advanced pages to the same size - to mimimize flicker. (Not sure why they have different sizes.)
6. Make text field of simple port the same size as the combo.
7. Change column order of rules list to "Action, From, To, ..."
8. Make 'Add Rule' dialog non-modal, so that 'Log Viewer' and 'Add Rule' can be used concurrently.
9. Shorten IPv6 address - if possible.
10. Fix selection of host radio when editing rules.
11. Fix installation of JPEG files for Spanish documentation.
12. Default to installing all translations.

product-maker suther Nov 21 2013

product-maker rudi Sep 27 2013

product-maker damianatorrpm Sep 24 2012

product-maker narya Apr 10 2012

product-maker cyberwan Mar 13 2012

product-maker eRSZ Feb 27 2012

product-maker ElectronOo Feb 15 2012

product-maker elric80 Feb 15 2012

product-maker electron222 Dec 18 2011

product-maker bruno666 Nov 13 2011

product-maker pvt14 Nov 10 2011

product-maker unikum111 Jul 27 2011

product-maker TommyCZ Jul 19 2011

product-maker aspotashev Jul 10 2011

product-maker Brutus180 Jul 03 2011

product-maker jmunin May 26 2011

product-maker cyberconan May 22 2011

product-maker kubicle May 11 2011

product-maker oboulonis May 09 2011

product-maker 442206 May 06 2011

product-maker SeaJey Apr 15 2011

product-maker kbios Apr 12 2011

product-maker deabru Mar 31 2011

product-maker mikko777 Mar 30 2011

product-maker steveke Mar 18 2011

product-maker MetalByte Mar 08 2011

product-maker supportfsf Feb 03 2011

product-maker andreduartesp Jan 27 2011

product-maker nowardev Jan 26 2011

product-maker SilentDis Jan 23 2011

product-maker YAFU Jan 23 2011

product-maker 6 6

File (click to download) Version Description Filetype Packagetype License Downloads Date Filesize OCS-Install DL
Details
version
0.4.3
updated May 23 2012
added Jan 23 2011
downloads today
0
page views today 5