NAME

foomuuri - multizone bidirectional nftables firewall

SYNOPSIS

foomuuri [OPTION] [COMMAND]

DESCRIPTION

Foomuuri is a firewall generator for nftables based on the concept of zones. It is suitable for all systems from personal machines to corporate firewalls, and supports advanced features such as a rich rule language, IPv4/IPv6 rule splitting, dynamic DNS lookups, a D-Bus API and FirewallD emulation for NetworkManager’s zone support.

OPTIONS

--help: display this help and exit
--verbose: verbose output
--version: output version information and exit
--set=option=value: set config option to value

COMMANDS

start: load configuration files, generate new ruleset and load it to kernel
start-or-good: same as start but fallback to previous “good” ruleset if loading fails
stop: remove ruleset from kernel
reload: same as start, followed by resolve+iplist refresh
check: load configuration files and verify syntax
list: list active ruleset currently loaded to kernel
list zone-zone {zone-zone...}: list active ruleset for zone-zone currently loaded to kernel
list macro: list all known macros
list counter: list all named counters
iplist list: list entries in all configured iplists and resolves
iplist list name {name...}: list entries in named iplist/resolve
iplist add name {timeout} ipaddress {ipaddress...}: add or refresh IP address to iplist
iplist del name ipaddress {ipaddress...}: delete IP address from iplist
iplist refresh name {name...}: refresh iplist @name entries now

FILES

Foomuuri reads configuration files from /etc/foomuuri/*.conf. See full documentation for configuration syntax.

AUTHORS

Kim B. Heino, b@bbbs.net, Foobar Oy

BUG REPORTS

Submit bug reports <https://github.com/FoobarOy/foomuuri/issues>