UFW KControl Module

System Software

Source (link to git-repo or to original if based on someone elses unmodified work): Add the source-code for this project on opencode.net

18
8.4
Description:

This is a KDE control center module to configure and control the Uncomplicated Firewall, as shipped with Kubuntu 10.10. The following features are supported:

1. Enable/disable firewall
2. Configure firewall default settings
3. Add, edit, and remove rules
4. Re-order rules via drag'n'drop
5. Import/export of rules
6. Setting of some IP tables modules

The module will appear under "Network and Connectivty" category.

**NOTE** 0.4.2 requires UFW 0.31 (as shipped with Kubuntu 12.04). For UFW 0.30 (as shipped with Kubuntu 11.10) please use 0.4.1
Last changelog:

8 years ago

0.4.3
-----
1. Actually get this to work with Kubuntu 12.04!!!

0.4.2
-----
1. Add support for UFW 0.31 - thanks to ufw-frontends author Darwin Baustista for very kindly supplying a patch.

0.4.1
-----
1. Fix loading of profiles.

0.4.0
-----
1. Add a simple log file viewer.
2. Save profiles into /etc/kcm_ufw - this way they are system-wide.
3. Store rule descriptions in etc/kcm_ufw, as they are part of this kcm, not ufw itself.
4. Block further actions, until current one is complete.
5. Set size of policy combos in simple and advanced pages to the same size - to mimimize flicker. (Not sure why they have different sizes.)
6. Make text field of simple port the same size as the combo.
7. Change column order of rules list to "Action, From, To, ..."
8. Make 'Add Rule' dialog non-modal, so that 'Log Viewer' and 'Add Rule' can be used concurrently.
9. Shorten IPv6 address - if possible.
10. Fix selection of host radio when editing rules.
11. Fix installation of JPEG files for Spanish documentation.
12. Default to installing all translations.

48 comments
Comments/Ratings

Please login or register to add a comment or rating

Rebelyouth

9 years ago

Hi,
compliment for the Kde module is really good!


Are you think to include in the new version :

Listening port and Dbus notification ?

That two would be great!!!!

Thanks again for this great Kde module

PS I created a Debian Sid package on my site rebelyouth.wordpress.com feel free to download

Report

Rebelyouth

9 years ago

The only thing wrong is :

Load Profile doesn't work

I tried to change permission to the file and also to run System Setting from root but still nothing

Report

mavron

9 years ago

Hi.
I've compiled and installed it on a Kubuntu 11.10, and it looks like a pretty nice project.
Nevertheless, it seems that I can't load profiles.
I've created 4 of them, they're correctly stored in /etc/kcm_ufw and I can see them in the drop down box (KCM -> Firewall -> Profiles -> Load Profile).
Anyway, when I click on one of them, nothing happens.

I've also tried to play with the python helper, but it doesn't seem to have a loadprofile option, and the others (add, update, setDefaults) just don't do the job.

Any idea?
Thx,
mav

PS
Heres one of the profiles:
Quote:
-> cat /etc/kcm_ufw/03_SomeService_\(SSH\,FTP\,HTTP\,HTTPS\,8080\,8443\).ufw
<ufw full="true" >
<defaults ipv6="no" loglevel="low" incoming="deny" outgoing="allow"/>
<rules>
<rule direction="in" v6="False" action="allow" descr="IN - Torrent" logtype="" dport="6882" hash="cd5e57462c0c877534df7ad53ef1caa5"/>
<rule protocol="tcp" direction="in" v6="False" action="allow" descr="IN - Torrent" logtype="" dport="6881" hash="1c3401adc6f71ef56a3280dbf33ef635"/>
<rule protocol="udp" direction="in" v6="False" action="allow" descr="IN - Torrent" logtype="" dport="4444" hash="91939fc508416200a8c51019980b92e1"/>
<rule direction="in" v6="False" action="allow" logtype="" dport="21"/>
<rule direction="in" v6="False" action="allow" logtype="" dport="80"/>
<rule direction="in" v6="False" action="allow" logtype="" dport="443"/>
<rule protocol="tcp" direction="in" v6="False" action="allow" descr="IN - 8080" logtype="" dport="8080" hash="3ffe6c2e0230196441eb4e752e041923"/>
<rule protocol="tcp" direction="in" v6="False" action="allow" descr="IN - 8443" logtype="" dport="8443" hash="5e3791634d466b6be8e42e180c7c784e"/>
</rules>
<modules enabled="nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns" />
</ufw>

Report

mck182

9 years ago

I have compiled & installed this kcm module, but I can't actually change the configuration. At the bottom it says "Querying firewall status..." and all the controls are disabled. Also console output shows no usable info. Both ufw and iptables are installed. Am I missing something else?

Report

C

CraigD

9 years ago

Did you install this into the kde-prefix? What happens if you run:

/usr/lib/kde4/libexec/kcm_ufw_helper.py --status --defaults --list --modules

Report

mck182

9 years ago

Yes,it was indeed path problems. I'm using Project Neon, which sets the paths to /opt, but dbus and possibly polkit files must be placed to /usr. That way it works, thanks :)

Report

9

TommyCZ

9 years ago

Hi, I realized that some packages are missing, may be it would be good idea to create a list of them, so a user, with fresh installed Kubuntu, can download them.

Report

C

CraigD

9 years ago

Uh?? What packages?

Report

9

kubicle

9 years ago

First of all, thanks for the great module.

At least on my machine, kcm_ufw_helper/kdebug seems to create a file /.kde/share/config/kdebugrc
(that's .kde under the root directory), contents:
[kcm_ufw_helper]
InfoOutput=4

I'm guessing that should be added to /root/.kde/share/config/kdebugrc

Not sure if this is a universal bug, though.

Details of my setup:
Kubuntu Oneiric Ocelot (devel version)
UFW Kcontrol module 0.2.1 (built from source)

Report

C

CraigD

9 years ago

OK, I spoke too soon! Re-read your comment, and yup its seems to create /.kde/share/... for me too. I think this is a bug in the KAuth code, but changing to use qDebug() works around this. I'll add this fix to the next release. Thanks for reporting. You should probably create a KDE bug report about this.

Report

9

kubicle

9 years ago

Thanks for the quick response.

KAuth seems a likely canditate as I seem to also have /.config/Trolltech.conf that lists kauth plugins and nothing else.

There could be something in KAuth that confuses / and /root. I'll take a look if I can make any sense of it (unlikely) and possibly file a bug at BKO (I hate to write vague bug reports like the one I wrote for you ;), I mainly wanted to confirm it wasn't a local issue)

Report

C

CraigD

9 years ago

Odd... I dont see this. The helper does not explicitly create any KDE related files, but it does use KDebug - perhaps this is causing the issue?

Can you try editing helper.cpp and replace:

#include <KDE/KDebug>

with:

#include <QtCore/QDebug>

and then replace all "kDebug()" with "qDebug()". Recompile, etc, and see if this fixes the issue? Thanks.

Report

9

TommyCZ

9 years ago

Hi, the problem with games occured. I compiled it, enabled firewall, tried to play HeroesOfNewerth but it couldn't login. So I realised that some ports are needed to be enabled to run this game. BUT. With 80 (login/update), 11031 (chatserver) were no problems but this game also need to open a range of ports 11235-11335 (game servers) which is impossible in your frontend for ufw.
Also if I disabled it (firewall), the HoN couldn't run. So I had to install Gufw and disable it from it, after that, HoN worked.

Report

C

CraigD

9 years ago

You can specify a range using "11235:11335". I've just tested this, and it works. This can be confirmed by tyeping "sudo ufw status" from a commandline - if ufw is enabled (when its disabled the commandline does not show the rules)

Also, un-checking the "Firewall status" checkbox disables UFW. Again, tyeping "sudo ufw status" from a commandline will confirm this.

Which version of Kubuntu are you on? I started with 10.10, but am now on 11.04

Report

dgvirtual

9 years ago

This is a great utility!

I installed a package for Ubuntu Natty on a Maverick system, so the placement of the kcm module might be outdated, but it is strange that the module is placed as a separate entry under "System administration" heading.

I think it is network related, so it should perhaps go under "Network and Connection " heading and perhaps – under "Network Settings"?

Report

C

CraigD

9 years ago

I agree, it should be under "Network and connectivity" - probably within "Network settings", but I'm not 100% sure...

Report

9

YAFU

9 years ago

Compiling with the instructions in the README file can not access the Firewall settings from SystemSettings because the files are installed in /usr/local/lib/kde4 (Kubuntu 10.10 KDE 4.6)
Compiling as you said in an earlier comment it works (in /usr/lib/kde4)
Thanks.

Report

9

YAFU

9 years ago

This is an old comment for v0.0.3. In newer versions you follow the README file instructions.

Report

Amnon82

9 years ago

Hi there. I just added it to my Distribution. Thx for the UI. The file to build it also for Archlinux you can find here:

http://gitorious.org/chakra-packages/apps/blobs/master/kcm-ufw/PKGBUILD

I had to hack the install destination folder to fit our chroot buildsystem ...

Report

3

SilentDis

9 years ago

The README file has no install info.
There is no INSTALL file.

Report

C

CraigD

9 years ago

Oops! Sorry. Its a standard CMake based project, so:

1. cmake . -DCMAKE_INSTALL_PREFIX=/usr
2. make
3. sudo make install

Report

9

YAFU

9 years ago

Is this a separate project to ufw-kde (https://launchpad.net/ufw-kde)?
Anyway I think it is better to control the firewall via a module like yours.
Thanks.

Report

C

CraigD

9 years ago

Never noticed that - I saw GUfw and ufw-frontends. Anyway, looking at ufw-kde there doesn't seem to be *anything* there.

Report

8 years ago

0.4.3
-----
1. Actually get this to work with Kubuntu 12.04!!!

0.4.2
-----
1. Add support for UFW 0.31 - thanks to ufw-frontends author Darwin Baustista for very kindly supplying a patch.

0.4.1
-----
1. Fix loading of profiles.

0.4.0
-----
1. Add a simple log file viewer.
2. Save profiles into /etc/kcm_ufw - this way they are system-wide.
3. Store rule descriptions in etc/kcm_ufw, as they are part of this kcm, not ufw itself.
4. Block further actions, until current one is complete.
5. Set size of policy combos in simple and advanced pages to the same size - to mimimize flicker. (Not sure why they have different sizes.)
6. Make text field of simple port the same size as the combo.
7. Change column order of rules list to "Action, From, To, ..."
8. Make 'Add Rule' dialog non-modal, so that 'Log Viewer' and 'Add Rule' can be used concurrently.
9. Shorten IPv6 address - if possible.
10. Fix selection of host radio when editing rules.
11. Fix installation of JPEG files for Spanish documentation.
12. Default to installing all translations.

12345678910
130
product-maker suther Nov 21 2013 9 excellent
product-maker rudi Sep 27 2013 9 excellent
product-maker damianatorrpm Sep 24 2012 9 excellent
product-maker narya Apr 10 2012 9 excellent
product-maker cyberwan Mar 13 2012 9 excellent
product-maker eRSZ Feb 27 2012 9 excellent
product-maker ElectronOo Feb 15 2012 9 excellent
product-maker elric80 Feb 15 2012 9 excellent
product-maker electron222 Dec 18 2011 9 excellent
product-maker bruno666 Nov 13 2011 9 excellent
product-maker pvt14 Nov 10 2011 9 excellent
product-maker unikum111 Jul 27 2011 9 excellent
product-maker TommyCZ Jul 19 2011 9 excellent
product-maker aspotashev Jul 10 2011 9 excellent
product-maker Brutus180 Jul 03 2011 9 excellent
product-maker jmunin May 26 2011 9 excellent
product-maker cyberconan May 22 2011 9 excellent
product-maker kubicle May 11 2011 9 excellent
product-maker oboulonis May 09 2011 9 excellent
product-maker 442206 May 06 2011 9 excellent
product-maker SeaJey Apr 15 2011 9 excellent
product-maker kbios Apr 12 2011 9 excellent
product-maker deabru Mar 31 2011 9 excellent
product-maker mikko777 Mar 30 2011 9 excellent
product-maker steveke Mar 18 2011 9 excellent
product-maker MetalByte Mar 08 2011 9 excellent
product-maker supportfsf Feb 03 2011 9 excellent
product-maker andreduartesp Jan 27 2011 9 excellent
product-maker nowardev Jan 26 2011 9 excellent
product-maker SilentDis Jan 23 2011 3 bad
product-maker YAFU Jan 23 2011 9 excellent

0 comments
 Comments

Please login or register to add a comment

Be the first to comment
suther
Nov 21 2013
Stincjatclava
May 01 2013
eRSZ
Feb 27 2012
elric80
Feb 15 2012
Sparrowmelody
Dec 26 2011
pvt14
Nov 10 2011
uteck
Jul 23 2011
TommyCZ
Jul 19 2011
aspotashev
Jul 10 2011
MoonBlossom
May 29 2011
oboulonis
May 27 2011
jmunin
May 26 2011
ach
Apr 21 2011
dgvirtual
Apr 09 2011
supportfsf
Apr 02 2011
groo
Feb 17 2011
YAFU
Jan 23 2011
hteles
Jan 23 2011
File (click to download) Version Description PackagetypeArchitectureRelease Channel Downloads Date Filesize DL OCS-Install MD5SUM
*Needs pling-store or ocs-url to install things
product-maker
CraigD
Pling
0 Affiliates

Support-Box

Become a Supporter of "UFW KControl Module" and similar System Software via a monthly donation of
  • $0.99
  • $2
  • $5
  • $10
  • $
    Enter a free Amount
UFW KControl Module is part of Libre Apps, Games and Add-ons, which is supported by the following people:
More System Software from CraigD:
product
Other System Software:
product
product
product
product
product
product
Details
license
version
0.4.3
updated May 23 2012
added Jan 23 2011
downloads 24h
0
mediaviews 24h 0
pageviews 24h 3
Report Misuse Report SPAM
System Tags app software