Device firewall

Table of Contents

• Firewall
• Saving configuration
• Examples
• Summary
• Previous
• D7 SDK programming examples

Firewall

On the D7, the Uncomplicated Firewall (UFW) is used to control any network traffic.

By default all traffic, inbound and outbound, on wwan0 (4G Module) is denied. All other traffic is enabled by default.

Resources:

• https://www.digitalocean.com/community/tutorials/ufw-essentials-common-firewall-rules-and-commands
• https://help.ubuntu.com/community/UFW
• https://wiki.archlinux.org/title/Uncomplicated_Firewall

Saving configuration

It is recommended to use a development image to configure UFW initially.

Once you are happy with your networking rules, copy the two files /etc/ufw/user.rules and /etc/ufw/user6.rules. These files can be placed in the /app/sys/etc/ufw overlay and can be added to your packaged project. See more details swugen.

For persistence between updates, the configuration files can be placed in /appdata/sys/etc/ufw/. For more details on the supported overlays see Overlays

Examples

Allow traffic on wwan0 interface:

ufw allow in on wwan0
ufw allow out on wwan0

Block traffic on wwan0 interface:

ufw deny in on wwan0
ufw deny out on wwan0

Summary

On this page, we have described the UFW firewall used on the D7.

Previous

Applying a software update on a device.

D7 SDK programming examples

This is the end of the guide. If you wish to see examples of using the D7 SDK's APIs, please see the D7 software development kit examples section.