Skip to main content

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.

Project description


Linuxfabrik's FirewallFabrik

FirewallFabrik made by Linuxfabrik

GitHub GitHub last commit Version OpenSSF Scorecard GitHubSponsors PayPal


FirewallFabrik

FirewallFabrik is a modern successor to Firewall Builder (fwbuilder), preserving its core design philosophy while updating it for current firewall technologies. It is a Qt-based GUI that manages firewall policies for multiple platforms, including iptables and nftables, from a single unified interface. All objects, rules, and device definitions are stored in a centralized policy database, allowing consistent reuse of services, networks, and rule sets. This architecture scales cleanly from a handful of devices to hundreds of firewalls, all managed from one policy file and one UI, with platform-specific configuration generated automatically.

This project was developed with the assistance of Claude Code by Anthropic.

Quick Start

# Run FirewallFabrik without installing (requires uv)
uvx --from 'firewallfabrik[gui]' fwf

# Or install it
uv tool install 'firewallfabrik[gui]'

For the full installation guide (pipx, pip, development setup, native themes, desktop integration), see the User Guide: Installing FirewallFabrik.

Documentation

Building the Documentation

The documentation is built with Sphinx using the Read the Docs theme. To build it locally:

pip install sphinx sphinx-rtd-theme myst-parser
cd docs
make html

The generated HTML will be in docs/_build/html/. Open docs/_build/html/index.html in a browser to view it.

Source Code Documentation

To generate browsable API documentation for all Python modules:

pip install pdoc
pdoc --output-dir docs/source-code src/firewallfabrik

Open docs/source-code/index.html in a browser to view it.

License

# Copyright (C) 2026 Linuxfabrik <info@linuxfabrik.ch>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# On Debian systems, the complete text of the GNU General Public License
# version 2 can be found in /usr/share/common-licenses/GPL-2.

# SPDX-License-Identifier: GPL-2.0-or-later

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

firewallfabrik-1.1.0.tar.gz (1.5 MB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

firewallfabrik-1.1.0-py3-none-any.whl (1.7 MB view details)

Uploaded Python 3

File details

Details for the file firewallfabrik-1.1.0.tar.gz.

File metadata

  • Download URL: firewallfabrik-1.1.0.tar.gz
  • Upload date:
  • Size: 1.5 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.14.2

File hashes

Hashes for firewallfabrik-1.1.0.tar.gz
Algorithm Hash digest
SHA256 bfbbf6c1d94a69d1e6b3cc85e5183d59a51a982777257335793d03d9cf0b59eb
MD5 18a038626126156742b0ae7298fdf21e
BLAKE2b-256 93eab174120dc7a85b03bd9173aa507db37f86fca1b7dc7bafef21d0eb3102f7

See more details on using hashes here.

File details

Details for the file firewallfabrik-1.1.0-py3-none-any.whl.

File metadata

  • Download URL: firewallfabrik-1.1.0-py3-none-any.whl
  • Upload date:
  • Size: 1.7 MB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.14.2

File hashes

Hashes for firewallfabrik-1.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 26594f0f2e1b29fc37a8609b3e553d02c5532719f34f86eb4fef05d0768ad241
MD5 c40e01038e823ed93bb09a0adc025b8a
BLAKE2b-256 ce55f2316dd15588ff81d47f61aab6f5dabc6d2496295e12aad9329bc1095611

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page