ufw
---
On installation, ufw is not automatically enabled. To load the firewall and
enable it on boot, run:

# ufw enable

See 'man ufw' and README for more information.


Upgrading
---------
It is important to note that to properly support remote users, the firewall
will not be automatically restarted during upgrades. After an upgrade, either
reboot or perform:

# /etc/init.d/ufw restart

Please note that the above command will briefly open the firewall before
reloading the rules.


Preseeding
----------
ufw has support for preseeding. To enable a default deny firewall, add to your
preseed file:
ufw ufw/enable boolean true

And to allow a service, use:
ufw ufw/allow_known_ports multiselect SSH, WWW

Currently, ufw knows about the following services:
Cups # tcp and udp port 631
DNS # tcp and udp port 53
Imap (Secure) # tcp port 993
Pop3 (Secure) # tcp port 995
SSH # tcp port 22
Samba # udp ports 137, 138 and tcp ports 139, 445
Smtp # tcp port 25
WWW # tcp port 80
WWW (Secure) # tcp port 443

You may also add additional ports by supplying a space separated list of
services from /etc/services, a port number or a port/protocol combination. Eg:
ufw ufw/allow_custom_ports string auth 8080 1194/udp

Please keep in mind that these ports and services are not associated with ufw
application profiles.