could you explain the difference between using these 2 commands to open a port? iptables and ufw

commands are:

iptables -I INPUT -p tcp --dport 3389 -j ACCEPT > to open only that tcp port

sudo ufw enable transmission > to open the whole program

being a newbie I’d say it’s safer to only open a determined port with iptables. What do you think?

ozymandias117,

A big thing the other comments are missing is that just running the iptables rule only works for the current boot. You need something to rerun it every restart

ufw is a front end to make it easier to use them

If you want/need more control, you should look into /etc/iptables/rules.d config files

Edit: or depending on what your distro already has, the firewalld comment makes a lot of sense. E.g. that’s Fedora’s default front end

boredsquirrel,

ufw or firewalld have presets and will automatically open the right ports and traffic types.

Also these are different programs.

ryannathans,

sudo ufw allow 3389

How’s that? Check the docs on ufw for more

Voytrekk,
@Voytrekk@lemmy.world avatar

Both are fine. Ufw has a set of applications that are defined in terms of what ports they need for convenience. You wouldn’t have to know that 3389 is for RDP, you could just allow RDP. Ufw ultimately modifies the iptables, it is just another interface for interacting with it.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • linux@lemmy.ml
  • fightinggames
  • All magazines