# UFW

12 Hacker News commenters recommended UFW and 15 criticized it, November 2025 to November 2026. It was recommended in 6 of 13 months.

**Verdict:** Simple way to open ports and firewall a Linux server with one command. Common caveat: rules files get hard to maintain and it can clash with Docker.

## Why people recommend it

- Recommended security setup (4 comments): "Use the Digital Ocean guide on setting up a Linux box securely and the UFW firewall." ([source](https://news.ycombinator.com/item?id=47777887)) "Follow all the best practices for your firewall with ufw." ([source](https://news.ycombinator.com/item?id=45916741)) "a proper UFW setup keeps the weather clear for me" ([source](https://news.ycombinator.com/item?id=49211722))
- People keep using it (3 comments): "I can guarantee I have no plans to change from it." ([source](https://news.ycombinator.com/item?id=46317461)) "ufw firewall enabled within my VPS's" ([source](https://news.ycombinator.com/item?id=46317652)) "I use UFW, and this config" ([source](https://news.ycombinator.com/item?id=48022068))
- Handles nftables and modern setups (2 comments): "at least ufw handles it nicely nowadays" ([source](https://news.ycombinator.com/item?id=46479090)) "And ufw supports nftables btw." ([source](https://news.ycombinator.com/item?id=46312087))
- Simple commands for opening ports (2 comments): "On ufw systems, I know what to do: if a port I need open is blocked, I run 'ufw allow'. It's dead simple" ([source](https://news.ycombinator.com/item?id=46317436)) "With ufw gui you need a single checkbox - block incoming connections." ([source](https://news.ycombinator.com/item?id=46317589))

## What people warn about

- Rules get brittle and unmaintainable (4 comments): "UFW rules can grow unmaintainable, brittle pile of sticks" ([source](https://news.ycombinator.com/item?id=46309971)) "the brittle pile of sticks that is the ufw rules files" ([source](https://news.ycombinator.com/item?id=46307719)) "brittle pile of sticks that is the ufw rules files" ([source](https://news.ycombinator.com/item?id=46306974))
- Not a real firewall (3 comments): "UFW doesn't do what it promises. It claims to be a firewall but only manages a few specific chains." ([source](https://news.ycombinator.com/item?id=48349778)) "don't rely on fake firewalls like ufw if you're concerned about this" ([source](https://news.ycombinator.com/item?id=48353020)) "I don't see the point of using ufw at all" ([source](https://news.ycombinator.com/item?id=45917089))

## Alternatives hackers recommend

- [pf (OpenBSD Packet Filter)](https://hackerapproved.com/p/pf.md): 53 recommend
- [nftables](https://hackerapproved.com/p/nftables.md): 29 recommend
- [LuLu firewall](https://hackerapproved.com/p/lulu.md): 27 recommend
- [iptables](https://hackerapproved.com/p/iptables.md): 15 recommend
- [firewalld](https://hackerapproved.com/p/firewalld.md): 11 recommend

## Cite as

Hacker Approved, "UFW", https://hackerapproved.com/p/ufw/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).