Turn on the firewall

Most desktop Linux systems come with a firewall built in, but it isn't always switched on out of the box. A firewall blocks unexpected incoming connections to your machine, so turning it on is a quick win. For normal desktop use you don't need to open any ports at all.

Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.

Get my free Dashboard →

CE: FirewallsEasy

Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.

Ubuntu and most Debian-based systems (ufw)

Ubuntu includes ufw, the "uncomplicated firewall". It lives up to the name.

Check whether it's on: sudo ufw status.
If it says inactive, turn it on: sudo ufw enable.
That's it. The default settings block incoming connections and allow your outgoing ones, which is what you want.

3 steps

Fedora and related systems (firewalld)

Fedora uses firewalld, and it's usually on already.

Check it's running: sudo firewall-cmd --state.
If it reports "running", you're done.
The default "zone" is sensible for a home machine, so there's nothing else to change for normal use.

3 steps

A note on your home router

Your home router has its own firewall, and it's your first line of defence for every device in the house. It's worth a quick check too.

Secure your home router

Track your Linux security progress. Free.

Create a free account to tick off tasks, see your Security Score improve, and know exactly what you've done and what's still to do.

Start your free security check

← Back to Linux Security Hub