Alternatives to ufw
Uncomplicated Firewall, a command-line tool for managing a netfilter firewall on Linux. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
ufw
Uncomplicated Firewall, a command-line tool for managing a netfilter firewall on Linux.
Replacements
Listings that take over the same core job as ufw.
firewalld
A dynamically managed Linux firewall daemon with network zones and a D-Bus interface.
firewalld manages Linux firewall rules through zones with separate runtime and permanent configuration, and offers GUI and applet front ends besides the command line.
OpenSnitch
An interactive application firewall for Linux that asks before letting any program make an outbound connection.
OpenSnitch is a graphical Linux application firewall that prompts on each outbound connection and can manage the nftables firewall, trading ufw's simplicity for per-program control.
Portmaster
Shows every connection each application makes and lets you block any of them, with sensible defaults already set.
Portmaster offers a graphical, per-application connection firewall with default tracker blocking on Windows and Linux, with some features paid.
Similar software
Related functionality, not a direct replacement.
Fail2ban
Log-watching daemon that bans addresses after repeated authentication failures.
CrowdSec
Detect suspicious behavior in server logs and web traffic.
AppArmor
A Linux kernel security module that confines programs to the actions allowed in per-application profiles.
OPNsense
An open-source firewall and routing platform based on FreeBSD that you install on your own hardware.
IPFire
A hardened Linux-based firewall distribution with VPN support, network segmentation and a web management console.
