Ufw and Iptables. Which is better and why? [closed]
I ain't afraid of no quake i mean firewall! [ref.1]
TL;DR PART
a simple image about pizza can answer sometimes many questions :)
Take a good look at this picture, then read the text below:
(IMAGE) Pizza as a Service — by Albert Barron
We start from the left (blue means, you have to manage it, green means the vendor/software manages it)
- Made at Home - Netfilter (Nightmare - Damn I'm Good)
- Take and Bake - Iptables (Hard - Come Get Some)
- Delivery - UFW (Normal - Let's Rock)
- Dining out - Some 1-clicks or predefined setups (Easy - Piece of Cake)
UFW is something like a simplistic interface to get basic things done with your firewall.
How much you want to manage, depends solely on you :)
THE LONGER PART
part I: i found a pretty decent and easy to understand article for the UFW: Understanding UFW
part II: this guide shows you the slight deeper using of iptables: The Beginner’s Guide to iptables, the Linux Firewall
part III: here are informations about the packetfilter, this is the basis of many firewall solutions A Deep Dive into Iptables and Netfilter Architecture
the parts are based on hierarchy, top is dependant on the lower ones.
[ref.1] (From Duke Nukem 3D - Referencing id Software's 1996 PC FPS game Quake)