UFW ON SNAPPY(8)

NAME
ufw on snappy - using ufw on snappy

DESCRIPTION
This program is for managing a Linux firewall and aims to provide an easy to use interface for the admin user. This interface is targeted primarily towards administering a bastion firewall. ufw packaged as a snap is very similar to ufw packaged on a traditional Linux distribution.

COMMANDS

ufw.doc
    documentation for ufw

ufw.cmd
    command line interface to ufw

ufw.init
    lowlevel inititialization script

snappy config ufw
    configuration directives exposed via snappy config

GETTING STARTED

When ufw is installed it is disabled by default. Before it can be enabled, the system must have the following kernel modules loaded:
  - iptable_filter
  - ip6table_filter On Ubuntu Core these are loaded using the load-kernel-modules declaration in the config for ubuntu-core. Eg:
  $ snappy config ubuntu-core > ./config Modify ./config to have:
  config:
    ubuntu-core:
      ...
      load-kernel-modules:
      - ip6table_filter
      - iptable_filter
      ... Then run:
  $ sudo snappy config ubuntu-core ./config Then reboot and ip6table_filter and iptable_filter should be loaded into the kernel. Now you can use ufw like normal. For example, to enable the firewall, allow ssh access, enable logging, and check the status of the firewall, perform:
  $ sudo ufw.cmd allow ssh/tcp
  $ sudo ufw.cmd logging low
  $ sudo ufw.cmd enable
  $ sudo ufw.cmd status verbose
  Status: active
  Logging: on (low)
  Default: deny (incoming), allow (outgoing), disabled (routed)
  New profiles: skip
  To Action From
  -- ------ ----
  22/tcp ALLOW IN Anywhere
  22/tcp (v6) ALLOW IN Anywhere (v6) ufw integrates into the boot sequence by providing the ufw.src service. It simply calls ufw.init start during boot. Service logs can be seen with:
  $ sudo snappy service logs ufw

UFW FRAMEWORK
The term ufw-framework predates snappy and the ufw-framework described in the ufw documentation should not be confused with snappy frameworks. Put simply, ufw is an app snap and doesn't provide framework services for other snaps to consume. On a snappy-based system apps have access to a read-only area and a writable area. After initial install on service start, ufw will copy the default configuration from the read-only area in $SNAP_APP_PATH to the writable area in $SNAP_APP_DATA_PATH. If you need or want to modify the configuration files as described in the ufw-framework documentation, look for these files in $SNAP_APP_DATA_PATH. Upgrades are handled similarly to an traditional Ubuntu system, if the configuration files in $SNAP_APP_DATA_PATH match the previously shipped version, the files will be updated to the new version, otherwise the files that are different are logged to the service log (see above) so that the files may be merged manually.

AUTHOR

ufw is Copyright 2008-2015, Canonical Ltd.

ufw and this manual page was originally written by Jamie Strandboge <jamie@canonical.com>