logo
Free, unlimited AI code reviews that run on commit
git-lrc git-lrc GitHub Install Now We'd appreciate a star git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt

foomuuri - multizone bidirectional nftables firewall

Authors

       Kim B. Heino, b@bbbs.net, Foobar Oy

Bug Reports

       Submit bug reports https://github.com/FoobarOy/foomuuri/issues

Commands

start  load configuration files, generate new ruleset and load it to kernel

       stop   remove ruleset from kernel

       reload same as start, followed by resolve and iplist refresh

       status show current status: running, zone-interface mapping

       check  load configuration files and verify syntax

       block  load “block all traffic” ruleset

       list   list active ruleset currently loaded to kernel

       listzone-zone{zone-zone...}
              list active ruleset for zone-zone currently loaded to kernel

       listmacro
              list all known macros

       listmacrokeyword{keyword...}
              list all macros with specified name or value

       listcounter
              list all named counters

       listcounterkeyword{keyword...}
              list named counter with specified name

       iplistlist
              list entries in all configured iplists and resolves

       iplistlistname{name...}
              list entries in named iplist/resolve

       iplistaddname{timeout}ipaddress{ipaddress...}
              add or refresh IP address to iplist

       iplistdelnameipaddress{ipaddress...}
              delete IP address from iplist

       iplistflushname{name...}
              delete all IP addresses from iplist

       iplistrefreshname{name...}
              refresh iplist @name entries now

       setinterface{interface}zone{zone}
              change interface to zone

       setinterface{interface}zone-
              remove interface from all zones

Description

Foomuuri  is  a  firewall  generator  for nftables based on the concept of zones.  It is suitable for all
       systems from personal machines to corporate firewalls, and supports advanced features such as a rich rule
       language, IPv4/IPv6 rule splitting, dynamic  DNS  lookups,  a  D-Bus  API  and  FirewallD  emulation  for
       NetworkManager’s zone support.

Files

Foomuuri  reads  configuration files from /etc/foomuuri/*.conf.  See full documentation for configuration
       syntax.

Name

       foomuuri - multizone bidirectional nftables firewall

Options

       --help display this help and exit

       --version
              output version information and exit

       --verbose
              verbose output

       --quiet
              be quiet

       --force
              force some operations, don’t check anything

       --soft don’t force operations, check more

       --set=option=value
              set config option to value

See Also

       Full documentation https://github.com/FoobarOy/foomuuri/wiki

Foomuuri 0.27                                     Jan 28, 2025                                       FOOMUURI(8)

Synopsis

foomuuri [OPTION] [COMMAND]

See Also