Crosslink TG
Product revision: 2.1
Getting started guide
2019-10-31
www.crosscontrol.com
15
5.1.
Using the “uncomplicated firewall”
Configuring the Linux firewall
iptables
can be complicated. A more user friendly approach is to
install the “uncomplicated firewall” package. This is a frontend to
iptables
.
# apt-get install ufw
By default ufw will configure the firewall to deny all incoming connections and allow all outgoing
connections.
SSH login could be useful, at least during development, and access to the device will be disabled
when the firewall is enabled. To allow SSH login:
# ufw allow ssh
This enables ssh traffic on port 22. It is also possible to specify port number, but ufw uses many
common keywords.
To activate the firewall, type:
# ufw enable
If an error regarding IPv6 is encountered when the firewall is enabled, IPv6 support has to be
turned off using the config file:
nano /etc/default/ufw
Change IPV6=yes
to
IPV6=no.
A kernel module for IPv6 will be added in the next OS release of CrossLink TG.
6.
Further Reading
For more information please consult the CrossLink TG Technical Manual and the CrossLink TG
Programmer and Software Manual, both are available at the CrossControl Support Site.
