Firewalld contra UFW

Webmin
1
SYSTEM INFORMATION
OS type and version Ubuntu 24.04
Webmin version 2.202

I have never really used Firewalld in Webmin, I am more used to UFW and it has worked great but yesterday I got a strange problem. I needed to allow 5055 and did so in UFW but a port scan told me that the port was closed so the service that needed it did not work. I googled and then looked in Firewalld and opened the port there. And directly it worked
So my question is. Why this happened? Is Firewalld a better choice than UFW

2

You’ve asked this in the Webmin category and you’ve only mentioned Webmin, which makes me think you only have Webmin (and not Virtualmin, also). If that’s the case, I have no answers for you, because Webmin does not configure a firewall of any sort. If you have a firewall other than UFW Webmin had nothing to do with it.

If, on the other hand, you installed Virtualmin using our installer, you would have firewalld, and a firewall suitable for use with Virtualmin and the services it manages. A search of the forum should bring up sufficient discussion for why firewalld is our default firewall (it’s available on all distros we support, it doesn’t create a bunch of bs rules, it works with fail2ban, and it’s reasonably easy to use). You may choose whatever firewall you want, but you’ll need to disable the firewalld firewall, and reconfigure fail2ban to work with whatever else you choose (ipset can work with any firewall, though, so it doesn’t change much, I don’t think).

3

No need to be aggressive. I mentioned Webmin because that is where you find Firewalld under network menu. Sorry for asking, Will not happpen again

4

Apologies, I wasn’t intending to be aggressive, just striving for clarity about what happens where. (Webmin never does anything without being told, Virtualmin configures a bunch of stuff and pulls in a bunch of dependencies.)

5

By previous posts you have done you have installed virtualmin and that will install Firewalld and I guess with interfere with UFW

Please use the copy and pastes from the screenshot with verify what system your running.

image
image381×300 8.17 KB

I see no aggression in Joe’s post, might be lost in translation.

6

It is clear that it interfered. I have removed UFW and opened the port in Firewalld and now it works as it should on that server.
I have a 3rd server where I have installed netdata. Have to open 19999. Have removed ufw and opened the port in Firewalld but a portscan still say closed

7

Firewalls can be run elsewhere, like your provider or if you run from home on your router.
Hard to know with limited information.

8

That is also solved now. It was not enough to restart firewalld, after reboot it workes as it should.

9

I was told (in college, by my brother) that my emails sounded “mean”… and I was like “but you know me”… and he said “exactly – in person we can see your smile, but not in email”.

So… for (redacted) years now, I’ve included a SMILEY FACE at the end of every email to nearly EVERYONE… and it has worked… people think I’m so friendly.

I hope they never find out the truth. : )