diff --git a/build.go b/build.go
index e790d71a5..253e4f760 100644
--- a/build.go
+++ b/build.go
@@ -95,6 +95,7 @@ var targets = map[string]target{
 			{src: "etc/linux-systemd/system/syncthing@.service", dst: "deb/lib/systemd/system/syncthing@.service", perm: 0644},
 			{src: "etc/linux-systemd/system/syncthing-resume.service", dst: "deb/lib/systemd/system/syncthing-resume.service", perm: 0644},
 			{src: "etc/linux-systemd/user/syncthing.service", dst: "deb/usr/lib/systemd/user/syncthing.service", perm: 0644},
+			{src: "etc/firewall-ufw/syncthing", dst: "deb/etc/ufw/applications.d/syncthing", perm: 0644},
 		},
 	},
 	"stdiscosrv": {
diff --git a/etc/firewall-ufw/README.md b/etc/firewall-ufw/README.md
new file mode 100644
index 000000000..875eb1a7c
--- /dev/null
+++ b/etc/firewall-ufw/README.md
@@ -0,0 +1,22 @@
+Uncomplicated FireWall application preset
+===================
+Installation
+-----------
+**Please note:** When you installed syncthing using the official deb package, you can skip the copying.
+
+Copy the file `syncthing` to your ufw applications directory usually located at `/etc/ufw/applications.d/`. (root permissions required).
+
+In a terminal run
+```
+sudo ufw app update syncthing
+```
+to load the preset.
+To allow the syncthing ports, run
+```
+sudo ufw allow syncthing
+```
+You can then verify the opened ports
+```
+sudo ufw status verbose
+```
+
diff --git a/etc/firewall-ufw/syncthing b/etc/firewall-ufw/syncthing
new file mode 100644
index 000000000..1aeada11f
--- /dev/null
+++ b/etc/firewall-ufw/syncthing
@@ -0,0 +1,4 @@
+[syncthing]
+title=Syncthing
+description=Syncthing file synchronisation
+ports=22000/tcp|21027/udp