foomuuri - multizone bidirectional nftables firewall
Contents
Bug Reports
Submit bug reports https://github.com/FoobarOy/foomuuri/issues
Commands
start load configuration files, generate new ruleset and load it to kernel
stop remove ruleset from kernel
reload same as start, followed by resolve and iplist refresh
status show current status: running, zone-interface mapping
check load configuration files and verify syntax
block load “block all traffic” ruleset
list list active ruleset currently loaded to kernel
listzone-zone{zone-zone...}
list active ruleset for zone-zone currently loaded to kernel
listmacro
list all known macros
listmacrokeyword{keyword...}
list all macros with specified name or value
listcounter
list all named counters
listcounterkeyword{keyword...}
list named counter with specified name
iplistlist
list entries in all configured iplists and resolves
iplistlistname{name...}
list entries in named iplist/resolve
iplistaddname{timeout}ipaddress{ipaddress...}
add or refresh IP address to iplist
iplistdelnameipaddress{ipaddress...}
delete IP address from iplist
iplistflushname{name...}
delete all IP addresses from iplist
iplistrefreshname{name...}
refresh iplist @name entries now
setinterface{interface}zone{zone}
change interface to zone
setinterface{interface}zone-
remove interface from all zones
Description
Foomuuri is a firewall generator for nftables based on the concept of zones. It is suitable for all
systems from personal machines to corporate firewalls, and supports advanced features such as a rich rule
language, IPv4/IPv6 rule splitting, dynamic DNS lookups, a D-Bus API and FirewallD emulation for
NetworkManager’s zone support.
Files
Foomuuri reads configuration files from /etc/foomuuri/*.conf. See full documentation for configuration
syntax.
Name
foomuuri - multizone bidirectional nftables firewall
Options
--help display this help and exit
--version
output version information and exit
--verbose
verbose output
--quiet
be quiet
--force
force some operations, don’t check anything
--soft don’t force operations, check more
--set=option=value
set config option to value
See Also
Full documentation https://github.com/FoobarOy/foomuuri/wiki
Foomuuri 0.27 Jan 28, 2025 FOOMUURI(8)
Synopsis
foomuuri [OPTION] [COMMAND]
