Install, Configure Advanced Policy Firewall (AFP) On Ubuntu 16.04

If you are a new user, you should not follow this guide for production sever but follow our basic server setup guide and IPTables guide to configure your firewall. New users can follow this guide with test/development servers. Advanced Policy Firewall is an iptables based firewall. Here is how to install, configure Advanced Policy Firewall (AFP) on Ubuntu 16.04.  It is essentially an interface to IPTables to configure a powerful firewall to secure servers. But it needs work experience with networking and resource monitoring. It can slightly delay the actions or suck resource more than written on official website. It is suggested more for dedicated servers, with at least 2 LAN cards and a modern server (read minimum 8GB physical RAM).

 

Install, Configure Advanced Policy Firewall (AFP) On Ubuntu 16.04

 

Here is official website with additional information :

First update server :

Then download package and extract :

This will give this kind of output :

There is a configuration file at /etc/apf/conf.apf, which you should take a back and open :

to have settings like this :

You can see the interface is named as eth0.

Start firewall :

To stop firewall :

Restart firewall :

Status of firewall :

There are are two files to list allow, deny :

Run this to add to allow list :

Run this to add to deny list :

In order to use on production server, you must read the official documents and other resources. We have only given a sane example to get started.