Skip to content

Foomuuri

Foomuuri is a multizone bidirectional nftables firewall.

Example configuration files are available for a host firewall and a router firewall.

See the installation page for instructions on installing Foomuuri. Help is available via GitHub discussions and the #foomuuri IRC channel on Libera.Chat.

Features

  • Firewall zones
  • Bidirectional firewalling for incoming, outgoing, and forwarding traffic
  • Suitable for systems ranging from personal laptops to corporate firewalls
  • Rich rule language for flexible and complex rules
  • Predefined list of services for simpler rule writing
  • Macros and templates supported in the rule language
  • IPv4 and IPv6 support, with automatic rule splitting per protocol
  • SNAT, DNAT, and masquerading support
  • Logging and packet/byte counting
  • Rate limiting
  • DNS hostname lookups and IP-list support, with dynamic IP address refreshing
  • External country and ASN IP lists through iplists (geolocation)
  • Multiple ISP support, with an internal network connectivity monitor
  • IPsec matching support
  • Ability to map specific traffic to separate zones
  • Automatic IP address banning support
  • Port knocking support
  • D-Bus API
  • Firewalld emulation for NetworkManager zone support
  • Support for raw nftables rules
  • Written to use modern nftables features

Changelog

Recent changes are documented in the changelog.