Pear OS, Tutorials/Tips

How to install and configure a graphical firewall client on Comice OS 4

Protecting your computer from network and physical attacks should be at the very top of your computing to-do list. And if you are new to Pear Linux Comice OS 4, a Linux distribution derived from Ubuntu Desktop, the network security aspect has been made a little bit easier for you.

And that is because on a new installation of Comice OS 4, which was recently reviewed here (see Pear Linux Comice OS 4 review), the firewall is enabled out of the box. Because of the default firewall rules, your computer is protected, even if you do not do anything else. Though your computer might be sitting behind a cable modem, fiber optic or DSL router with a firewall enabled, that does not negate the need for running a firewall on your computer. A good case for why this is highly recommended has been made in a previous article. See Why your computer needs a firewall enabled.

By the way, the firewall application is called ufw, the Uncomplicated FireWall. It is a command line frontend to IPTables, the original script for managing the Linux firewall. ufw was borne out of a need for a simple, easy-to-use alternative to IPTables. That is a very short history of ufw.

While it is easy to use, it is still a command line tool. For those not comfortable on the command line, there is a graphical interface for ufw. It is called Gufw. Installing it offers a more user-friendly interface for managing the firewall. This article show how to install and enable it.

Related Post:  Deploying Machine Learning workloads in Kubernetes clusters that support GPUs

You can install it from the command line or by using Pear Appstore, Comice OS’s graphical package manager. To install it from the command line, start a shell terminal, and type sudo apt-get install gufw. The screen shot below shows how it should be.
Comice OS 4 Install Gufw Firewall Terminal

From Pear Appstore, click on the Repository tab, and search for “gufw.” There should be just one result returned. Click on the Install button to download and install it.
Comice OS 4 Install Gufw Firewall

After installation has completed successfully, click the Start button to launch it.
Comice OS 4 Start Gufw Firewall

This is what Gufw looks like when it has not been enabled. To enabled it, click on the key button to unlock it. You will be required to authenticate.
Comice OS 4 Unlock Gufw Firewall

After it has been unlocked, click on the Status switch to enable it. And that is all you need to do. As stated earlier, unless you want to run a service that can be remotely accessed from other computers, you do not need to do anything else. The default rule, which allows all outgoing connections, while denying all incoming connections that have no related entry in the State table, keeps your computer protected.
Comice OS 4 Enable Gufw Firewall

Related Post:  Searching for a software development company? Here's what you need to know

A good way to keep an eye on what service is running on your computer, is to install an application called nmap, the Network Mapper. From the command line, type sudo apt-get install nmap to install it. You may also use Pear Appstore. Just search for “nmap.” After installation, type nmap localhost. The output will show a list of open ports on your computer. Make a note of the services listed. Run this command often just to make sure no service is running that you did not enable.

Please share:

We Recommend These Services

Register now for Big Data & AI Conference, international Big Data and AI conference in Dallas, TX (USA), June 27 - 29, 2019

Reasons to use control panel for your server

Register for the End-to-end Machine Learning with TensorFlow on Google Cloud Platform workshop. It will be conducted by the manager of Google's Cloud AI Advocacy team

Launch an SSD VPS in Europe, USA, Asia & Australia on Vultr's KVM-based Cloud platform starting at $5:00/month (15 GB SSD, 768 MB of RAM).


  1. Please rework the graphics and icons, they are poorly made and it looks cheap with that quality.

  2. Why isn’t the firewall app included by default instead?
    You have to go online without a firewall ON to get it?

  3. Pingback: Graphical firewall management on Comice « 0ddn1x: tricks with *nix

  4. Thanks for sharing this info.

Leave a Comment

Your email address will not be published. Required fields are marked *