How to check Firewall status in Linux?

How to Check Firewall Status in Linux: A Comprehensive Guide

Direct Answer:

To check the firewall status in Linux, you can use the following commands:

For ufw (Uncomplicated Firewall) firewall: sudo ufw status

For iptables firewall: sudo iptables -n -L (or sudo iptables -t filter -n -L for default chain)

For firewalld (FirewallD) firewall: sudo firewall-cmd --state (or sudo firewall-cmd --state --zones= public for a specific zone)

For firewall ( iptables-based) firewall: sudo firewall-cmd --state

These commands will provide details about the current status of the firewall, including the number of active rules, rules not yet applied, and any issues or errors that may have occurred.

Introduction

Firewalls are a crucial aspect of network security in Linux. A firewall is a system that monitors and controls network traffic based on predetermined security rules. In this article, we will explore how to check the firewall status in Linux. This information is essential for system administrators and users who need to monitor and troubleshoot their firewall configuration.

ufw (Uncomplicated Firewall)

ufw is a popular and user-friendly firewall for Linux. ufw is used by default on Ubuntu-based distributions, such as Ubuntu, Linux Mint, and others. Here’s how to check the firewall status using ufw:

Table of Contents

Checking ufw Status

To check the status of ufw, use the command sudo ufw status. This command provides a summary of the firewall rules, including:

Number of rules: The total number of rules configured

Number of enabled rules: The number of rules that are enabled and are currently blocking or allowing traffic

Number of disabled rules: The number of rules that are disabled and are not being used

Rules in memory: The number of rules that have been loaded into memory

Example Output:

Status: active

Logging: on (low)

Default: **ufw allow

ufw Rules

To view specific rules, use the command sudo ufw status verbose. This command provides detailed information about each rule, including:

proto: The protocol used (TCP, UDP, or ICMP)

from: The source IP address or network

to: The destination IP address or network

action: Whether the rule allows or blocks traffic

in/out: Whether the rule applies to incoming or outgoing traffic

port: The specific port number or range

Table: ufw Rules Example Output

Rule #	Proto	From	To	Action	In/Out	Port
1	tcp	192.168.1.100	192.168.1.200	ALLOW	in	22
2	udp	192.168.1.100	192.168.1.200	BLOCK	out	53
3	icmp	127.0.0.1		ALLOW	in	–

firewalld (FirewallD)

FirewallD is another popular firewall for Linux. firewalld is used by default on Red Hat Enterprise Linux, CentOS, and other RPM-based distributions. Here’s how to check the firewall status using firewalld:

Checking firewalld Status

To check the status of firewalld, use the command sudo firewall-cmd --state. This command provides information about the firewall status, including:

The overall status of the firewall (enabled or disabled)

The active zones (e.g., public, internal, or dmz)

Any issues or errors that have occurred

Example Output:

firewalld 0.6.3

Enabled: yes

active zones: public

firewalld Zones

To view specific zones or rules, use the command sudo firewall-cmd --zone=public --list-all. This command provides information about the rules and services associated with a specific zone.

Conclusion

In this article, we have covered how to check the firewall status in Linux using ufw, iptables, firewalld, and firewall. We have provided examples of how to check the overall status, view specific rules, and troubleshoot issues with your firewall configuration. As a system administrator or user, it is essential to regularly monitor and maintain your firewall to ensure your system remains secure and compliant with network security regulations.

Additional Resources: