From: "Kim B. Heino" <b@bbbs.net>
To: netfilter@vger.kernel.org
Subject: [Announce] Foomuuri - New firewall software using nftables
Date: Thu, 20 Apr 2023 14:09:37 +0300 [thread overview]
Message-ID: <20230420140937.29bd87c2@cobra.bbbs.net> (raw)
Hi,
Foomuuri is a multizone bidirectional nftables firewall.
We have been developing Foomuuri firewall software for last four
months. It's already installed to ~50 different systems, from laptops
to servers to corporate router firewall.
Now we consider it as "stable" so it's time to annouce is more
publicly. It should fit most firewalls as is, only some advanced
features (like multi-ISP) are missing.
Source, documentation and release files are available at:
https://github.com/FoobarOy/foomuuri
Help wanted: All kind of ideas, testing, documentation, patches, etc
are welcome. For example, we use rpm packages ourself and deb packages
are only briefly tested.
Features:
- Firewall zones
- Bidirectional firewalling for incoming, outgoing and forwarding traffic
- Suitable for all systems from personal laptop to corporate firewalls
- Rich rule language for flexible and complex rules
- Predefined list of services for simple rule writing
- Rule language supports macros and templates
- IPv4 and IPv6 support with automatic rule splitting per protocol
- SNAT, DNAT and masquerading support
- Logging and counting
- Rate limiting
- DNS hostname lookup support with dynamic IP address refreshing
- IPsec matching support
- Ability to map certain traffic to separate zones
- D-Bus API
- FirewallD emulation for NetworkManager's zone support
- Raw nftables rules can be used
- Fresh design, written to use modern nftables's features
Sorry if this email is considered spam. I will not send it again.
reply other threads:[~2023-04-20 11:09 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20230420140937.29bd87c2@cobra.bbbs.net \
--to=b@bbbs.net \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).