{"slug": "ufw", "name": "UFW", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 3, "commenters": 4, "warners": 0, "score": 2.939, "rising": 0.35, "first": "2025-12-17", "latest": "2026-08-07", "why": "That combined with a proper UFW setup keeps the weather clear for me.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 1, "compare": 0, "warn": 0}, "spark": [0, 0, 0, 1, 0, 0, 1, 0, 0, 1, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "That combined with a proper UFW setup keeps the weather clear for me.", "icon": true, "domain": null, "github_repo": null, "official_url": "https://launchpad.net/ufw", "pricing": "", "aliases": ["UFW", "ufw"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 787387553, "item_id": 49211722, "url": "https://news.ycombinator.com/item?id=49211722", "by": "rglover", "date": "2026-08-07", "stance": "recommend", "quote": "That combined with a proper UFW setup keeps the weather clear for me.", "excerpt": "All of my boxes are cheap VPS. Highly recommend people throw Cloudflare in front of their stuff. I switched all of my load balancers over to there and all of that bot crap went away. That combined with a proper UFW setup keeps the weather clear for me.", "context": "", "use_case": "firewall", "switched_from": "", "story": "99% of My Website Traffic Is Bots"}, {"id": 771667906, "item_id": 48229244, "url": "https://news.ycombinator.com/item?id=48229244", "by": "adamddev1", "date": "2026-05-21", "stance": "recommend", "quote": "I was missing something like a template with the defaults that come with UFW, for instance.", "excerpt": "I enjoyed my foray into trying FreeBSD for my personal server. There's something cool, clean, simple and \"punk rock\" about it. But I have up as my main pain points were: - PM2 was buggy on FreeBSD, which I used to manage my processes - An alternative, using `rc.d` to run daemons was just so hard to get logs working. - The firewall required too much self configuration to get it right with all the best security practic", "context": "", "use_case": "firewall", "switched_from": "", "story": "Blog ran on Ubuntu 16.04 for 10 years. I migrated it to FreeBSD"}, {"id": 750366626, "item_id": 46897914, "url": "https://news.ycombinator.com/item?id=46897914", "by": "_Chief", "date": "2026-02-05", "stance": "recommend", "quote": "then use UFW to only allow SSH from the tailscale network", "excerpt": "> If the SSH connection is set to disallow passwords and only authorize via SSH keys, how big of a risk is this low risk, do this. Keys (ed25519,4096 rsa) are impractical to brute force. However I'd also recommend: - use a different port than 22 (add your .ssh/config for easier UX if needed) - port 22 can get incredibly noisy with tons of bots probing - disable passwordAuth, disable PermitRootLogin - use a normal use", "context": "", "use_case": "firewall restricting SSH", "switched_from": "", "story": "Ask HN: Is Connecting via SSH Risky?"}]}], "caveats": [], "who": [{"by": "p0w3n3d", "context": "iptables user", "url": "https://news.ycombinator.com/item?id=46309489", "date": "2025-12-17"}], "tags": [], "use_cases": ["firewall", "firewall restricting ssh", "firewall configuration"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49211386", "title": "99% of My Website Traffic Is Bots", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48227397", "title": "Blog ran on Ubuntu 16.04 for 10 years. I migrated it to FreeBSD", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46895494", "title": "Ask HN: Is Connecting via SSH Risky?", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46305585", "title": "I got hacked: My Hetzner server started mining Monero", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"neutral": 1}, "2026-01": {}, "2026-02": {"recommend": 1}, "2026-03": {}, "2026-04": {}, "2026-05": {"recommend": 1}, "2026-06": {}, "2026-07": {}, "2026-08": {"recommend": 1}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 787387553, "item_id": 49211722, "url": "https://news.ycombinator.com/item?id=49211722", "by": "rglover", "date": "2026-08-07", "stance": "recommend", "quote": "That combined with a proper UFW setup keeps the weather clear for me.", "excerpt": "All of my boxes are cheap VPS. Highly recommend people throw Cloudflare in front of their stuff. I switched all of my load balancers over to there and all of that bot crap went away. That combined with a proper UFW setup keeps the weather clear for me.", "context": "", "use_case": "firewall", "switched_from": "", "story": "99% of My Website Traffic Is Bots"}, {"id": 771667906, "item_id": 48229244, "url": "https://news.ycombinator.com/item?id=48229244", "by": "adamddev1", "date": "2026-05-21", "stance": "recommend", "quote": "I was missing something like a template with the defaults that come with UFW, for instance.", "excerpt": "I enjoyed my foray into trying FreeBSD for my personal server. There's something cool, clean, simple and \"punk rock\" about it. But I have up as my main pain points were: - PM2 was buggy on FreeBSD, which I used to manage my processes - An alternative, using `rc.d` to run daemons was just so hard to get logs working. - The firewall required too much self configuration to get it right with all the best security practic", "context": "", "use_case": "firewall", "switched_from": "", "story": "Blog ran on Ubuntu 16.04 for 10 years. I migrated it to FreeBSD"}, {"id": 750366626, "item_id": 46897914, "url": "https://news.ycombinator.com/item?id=46897914", "by": "_Chief", "date": "2026-02-05", "stance": "recommend", "quote": "then use UFW to only allow SSH from the tailscale network", "excerpt": "> If the SSH connection is set to disallow passwords and only authorize via SSH keys, how big of a risk is this low risk, do this. Keys (ed25519,4096 rsa) are impractical to brute force. However I'd also recommend: - use a different port than 22 (add your .ssh/config for easier UX if needed) - port 22 can get incredibly noisy with tons of bots probing - disable passwordAuth, disable PermitRootLogin - use a normal use", "context": "", "use_case": "firewall restricting SSH", "switched_from": "", "story": "Ask HN: Is Connecting via SSH Risky?"}, {"id": 740951824, "item_id": 46309489, "url": "https://news.ycombinator.com/item?id=46309489", "by": "p0w3n3d", "date": "2025-12-17", "stance": "neutral", "quote": "As a user of iptables this order makes me anxious.", "excerpt": "$ sudo ufw default deny incoming $ sudo ufw default allow outgoing $ sudo ufw allow ssh $ sudo ufw allow 80/tcp $ sudo ufw allow 443/tcp $ sudo ufw enable As a user of iptables this order makes me anxious. I used to cut myself out from the server many times because first blocking then adding exceptions. I can see that this is different here as the last command commits the rules...", "context": "iptables user", "use_case": "firewall configuration", "switched_from": "", "story": "I got hacked: My Hetzner server started mining Monero"}]}