ufw status

[jonwsoto]

I am a linux newb here, just set this up on my Mac Mini 2014 🎉.

I noticed by using sudo ufw status it was set to inactive. I was reading in the manual that it should be enabled by default. Any way I could have screwed this up on the initial install? I did have a slight hiccup as I used the first release IOS and obtained the black screen. I was able to get it up and running and now updated to v2.1.0. Just kind of concerning that it wasn't enabled as it stated in the documentation. I used sudo systemctl enable ufw --now
to get it up. It appears to persist now after reboot. ChatGPT thinks maybe it was missing enablement step in the installer?

[dhoppe]

I can confirm that ufw is not enabled by default.

~ ❯ sudo ufw status
[sudo] password for dhoppe:
Status: inactive

~ ❯ sudo systemctl status ufw
○ ufw.service - CLI Netfilter Manager
     Loaded: loaded (/usr/lib/systemd/system/ufw.service; disabled; preset: disabled)
     Active: inactive (dead)

~ ✗ sudo ufw --force enable
Firewall is active and enabled on system startup

~ ❯ sudo ufw status
Status: active

To                         Action      From
--                         ------      ----
53317/udp                  ALLOW       Anywhere
53317/tcp                  ALLOW       Anywhere
22/tcp                     ALLOW       Anywhere
172.17.0.1 53/udp          ALLOW       172.16.0.0/12              # allow-docker-dns
53317/udp (v6)             ALLOW       Anywhere (v6)
53317/tcp (v6)             ALLOW       Anywhere (v6)
22/tcp (v6)                ALLOW       Anywhere (v6)

~ ❯ sudo systemctl status ufw
○ ufw.service - CLI Netfilter Manager
     Loaded: loaded (/usr/lib/systemd/system/ufw.service; disabled; preset: disabled)
     Active: inactive (dead)

~ ✗ sudo systemctl enable --now ufw
Created symlink '/etc/systemd/system/multi-user.target.wants/ufw.service' → '/usr/lib/systemd/system/ufw.service'.

~ ❯ sudo systemctl status ufw
● ufw.service - CLI Netfilter Manager
     Loaded: loaded (/usr/lib/systemd/system/ufw.service; enabled; preset: disabled)
     Active: active (exited) since Thu 2025-09-04 16:01:17 CEST; 4s ago
 Invocation: d1ce56c3962a47cb94d2845b31fa3448
    Process: 1944 ExecStart=/usr/lib/ufw/ufw-init start (code=exited, status=0/SUCCESS)
   Main PID: 1944 (code=exited, status=0/SUCCESS)
   Mem peak: 1.8M
        CPU: 10ms

Sep 04 16:01:17 omarchy systemd[1]: Starting CLI Netfilter Manager...
Sep 04 16:01:17 omarchy ufw-init[1948]: Firewall already started, use 'force-reload'
Sep 04 16:01:17 omarchy systemd[1]: Finished CLI Netfilter Manager.

The command sudo ufw --force enable does not work as expected, because ufw is being disabled again after a reboot. Instead the command sudo systemctl enable --now ufw should be used to enable ufw permanently.

@dhh I am not sure if this was working before.

• a712a09

[dhh]

Fixed via #1429