Firewallfabrik
Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.
Install / Use
/learn @Linuxfabrik/FirewallfabrikREADME
FirewallFabrik
FirewallFabrik is a modern successor to Firewall Builder (fwbuilder), preserving its core design philosophy while updating it for current firewall technologies. It is a Qt-based GUI that manages firewall policies for multiple platforms, including iptables and nftables, from a single unified interface. All objects, rules, and device definitions are stored in a centralized policy database, allowing consistent reuse of services, networks, and rule sets. This architecture scales cleanly from a handful of devices to hundreds of firewalls, all managed from one policy file and one UI, with platform-specific configuration generated automatically.
This project was developed with the assistance of Claude Code by Anthropic.
Installation
Make sure to include the [gui] extra to pull in PySide6 for the graphical interface.
Using uv (recommended)
The recommended way to install FirewallFabrik. You can run it without a permanent install:
uvx --from 'firewallfabrik[gui]' fwf
Or install it as a tool:
uv tool install 'firewallfabrik[gui]'
For the full installation guide (pipx, pip, development setup, native themes, desktop integration), see the User Guide: Installing FirewallFabrik.
Documentation
- User Guide -- installation, GUI overview, working with objects, firewall policies, cookbook, and more.
- Migrating from Firewall Builder -- import .fwb files and differences.
- Developer Guide -- database manager, debugging, rule processors, testing, and design decisions.
- Changelog -- release history.
- Contributing -- how to contribute.
- Issue Tracker -- bug reports and feature requests.
Source Code Documentation
To generate browsable API documentation for all Python modules:
pip install pdoc
pdoc --output-dir docs/source-code src/firewallfabrik
Open docs/source-code/index.html in a browser to view it.
License
# Copyright (C) 2026 Linuxfabrik <info@linuxfabrik.ch>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# On Debian systems, the complete text of the GNU General Public License
# version 2 can be found in /usr/share/common-licenses/GPL-2.
# SPDX-License-Identifier: GPL-2.0-or-later
Related Skills
healthcheck
343.3kHost security hardening and risk-tolerance configuration for OpenClaw deployments
tmux
343.3kRemote-control tmux sessions for interactive CLIs by sending keystrokes and scraping pane output.
prose
343.3kOpenProse VM skill pack. Activate on any `prose` command, .prose files, or OpenProse mentions; orchestrates multi-agent workflows.
claude-opus-4-5-migration
92.1kMigrate prompts and code from Claude Sonnet 4.0, Sonnet 4.5, or Opus 4.1 to Opus 4.5
