CDIST-TYPE__UFW(7)

πŸ’– cdist-type__ufw πŸ’–

okay bestie, so this is a cdist type called cdist-type__ufw, and it's literally here to install the Uncomplicated FireWall for you. yes that's what UFW stands for. no cap. ✨


🌸 DESCRIPTION 🌸

It installs the Uncomplicated FireWall. That's the whole vibe. πŸ’…

Most modern distros out there already carry UFW in their main repositories, so it's giving "no problem, bestie" β€” but on CentOS this type will automatically enable the EPEL repository for you, because CentOS wants to be ✨extra✨ about it. πŸ™ˆ

Also? Some global configuration can be set with this type too. Not just the install. We're doing full glow-up here. πŸŽ€


πŸ¦‹ OPTIONAL PARAMETERS πŸ¦‹

  • state β€” pick one of "enabled", "running", "present", or "absent". Defaults to "enabled", which registers UFW to start on boot β€” so it's up and running before you even get out of bed, main character energy fr fr. πŸ‘‘
  • logging β€” pick one of "off", "low", "medium", "high", or "full". This gets passed straight to ufw logging. And listen: if you don't specify it, the logging level is not modified β€” it stays exactly as it was, no touching, we respect boundaries here. 🫢
  • default_incoming β€” pick one of "allow", "deny", or "reject". This is the default policy for dealing with ingress packets β€” aka the stuff coming in to you. πŸšͺ
  • default_outgoing β€” pick one of "allow", "deny", or "reject". The default policy for dealing with egress packets β€” aka the stuff going out from you. πŸšͺπŸ’¨
  • default_routed β€” pick one of "allow", "deny", or "reject". The default policy for dealing with routed packets β€” those are the ones just passing through this machine, like a lil tourist. 🧳✨

🌈 EXAMPLES 🌈

okay so here's the moment you've been waiting for, bestie, the receipts: πŸ“œ

# Install UFW
__ufw
# Setup UFW with maximum logging and no restrictions on routed packets.
__ufw --logging full --default_routed allow

the way that second one just says "maximum logging, zero restrictions on routed packets"… iconic. it ate. πŸ’€πŸ”₯


⭐ SEE ALSO ⭐

go read that one too, iykyk. πŸ“šπŸ’œ


πŸŽ€ AUTHORS πŸŽ€

  • Mark Polyakov <mark@markasoftware.com>

shoutout to Mark, the blueprint, the moment. πŸ‘‘


πŸ’œ COPYING πŸ’œ

Copyright (C) 2019 Mark Polyakov. You can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

periodt. that's the license. share it, remix it, just keep it free. πŸ¦‹


ungleich GmbH 2021


lowkey that's everything bestie, you're fully certified in __ufw now, no cap 🫢✨

this was version 7.0.0, dated Jul 31, 2022, and it's part of the cdist manual β€” mwah, take care of your firewall and it'll take care of you πŸ’…πŸŽ€πŸ’–

πŸ“¦ where this page comes from