FirewallFabrik is a graphical firewall policy management tool and modern successor to Firewall Builder.
Its Qt 6 interface provides centralised policy design for multiple Linux firewalls, with support for both iptables and nftables.
Administrators create reusable objects representing hosts, networks, services and interfaces, then arrange them into firewall rules. FirewallFabrik compiles these policies into deployment-ready configurations that can be installed manually, through automation tools, or with its built-in SSH installer.
This is free and open source software.
Key Features
- Manages iptables and nftables policies from a unified Qt 6 interface.
- Maintains objects, rules and firewall definitions in a central policy database.
- Supports reusable hosts, networks, services, interfaces and object groups.
- Generates deterministic, human-readable firewall configurations.
- Stores policies in a version-control-friendly YAML format.
- Imports existing Firewall Builder XML policy files.
- Supports dual-stack IPv4 and IPv6 firewall policies.
- Provides NAT, custom chains, clustering and routing configuration.
- Detects problems such as rule shadowing during compilation.
- Includes search, search and replace, and full undo and redo history.
- Deploys policies to individual or multiple firewalls over SSH.
- Integrates with Ansible, CI/CD pipelines and other automation systems.
Website: github.com/Linuxfabrik/firewallfabrik
Support:
Developer: Linuxfabrik
License: GNU General Public License v2.0

FirewallFabrik is written in Python. Learn Python with our recommended free books and free tutorials.
Related Software
| Firewalls | |
|---|---|
| OpenSnitch | Interactive application firewall |
| nftables | Provides a new in-kernel packet classification framework |
| Firewalld | Dynamically managed firewall with support for network/firewall zones |
| ufw | Uncomplicated Firewall. This is software for managing a netfilter firewall |
| Portmaster | Application firewall that does the heavy lifting |
| iptables | Configure the Linux 2.4.x and later packet filtering ruleset |
| Shorewall | High-level tool for configuring Netfilter |
| gufw | Easy, intuitive, way to manage your Linux firewall |
| XDP-Firewall | Stateless firewall tool |
| Vuurmuur | Uncomplicated Firewall, manage a netfilter firewall |
| awall | Firewall configuration tool, providing various benefits over plain iptables |
| Foomuuri | Multizone bidirectional nftables firewall |
| bgpipe | BGP reverse proxy and firewall |
| FirewallFabrik | Graphical firewall policy management tool |
Read our verdict in the software roundup.
Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |


Please read our Comment Policy before commenting.