Today, as part of troubleshooting this update error:
http://security.ubuntu.com/ubuntu resolute-security InRelease is not (yet) available
I checked the Firewall and it was off and this is not the first occasion it has been switched off without my permission or knowledge.
Unless there is a known bug that is currently being fixed then I need to get better protection from the Firewall.
Q1. Is there a way of retrieving GUFW info from logs that will show me when and which process turned the GUFW off?
Q2. Is there a way to get some kind of warning whenever the GUFW gets turned off?
Q3. Is there something else I can do to force the GUFW to stay on or should I be using a different GUI Firewall - if there is one?
Q4. Has anyone else checked their GUFW recently and found it to be off?
My system details are:
Operating System: Kubuntu 26.04 LTS
KDE Plasma Version: 6.6.4
KDE Frameworks Version: 6.24.0
Qt Version: 6.10.2
Kernel Version: 7.0.0-15-generic (64-bit)
Graphics Platform: Wayland
What I discovered is that my UFW Firewall was not switched on after a computer restart - an issue which I have since fixed. However, what I still do not know is whether the issue was caused by my particular setup or an omission in Kubuntu 26.04 LTS.
Maybe this topic is better suited to the Kubuntu forum rather than the KDE forum. So I will try over there.
It is probably not only Kubuntu as I stumbled over Schrödinger’s UFW Firewall, on Arch, myself
Is it dead (“inactive” like the Konsole says) or is it alive (“Enabled” like the KDE settings say)?
As it is Arch in my case, back then I just blamed myself for not following the Archwiki through and not enabling the service. But in part that was because the KDE settings page deceived me.
To answer your question, as far as I know, the true current Firewall status is as reported via Konsole.
I tried your example and the Firewall panel in System Settings does not dynamically update from Enabled to Disabled if I switch off the Firewall via Konsole. Hence, the apparent disparity in your screenshot.
However, if I exit the Firewall panel then go back into it (or if it was not already on screen) then it will correctly display the Firewall status as disabled.
Also, if I manually switch to Disabled (or Enabled) via the System Settings panel then the Firewall status will be updated accordingly.
It is interesting that your system appears not to request a password to change the Firewall status whereas my system always requests a password regardless of where I change the Firewall from.
it was not sudo ufw enable / disable that I missed.
It was systemctl enable ufw.service, kubuntu as a systemd system should be similar, that makes it to survive a reboot.
If systemctl status ufw.service reports:
○ ufw.service - CLI Netfilter Manager
Loaded: loaded (/usr/lib/systemd/system/ufw.service; disabled; preset: disabled)
Active: inactive (dead)
I can set ufw in the KDE setting to Enabled (and it asks for my Password). It shows enabled there, even after a reboot (as I only “accidentally” caught a few weeks later 
) , but sudo utw status will always report “inactive”.
Don’t know which one is correct, I only know after that systemctl enable (and start) now both show the same.
