Skip to content

Linuxfabrik/firewallfabrik


Linuxfabrik FirewallFabrik

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts. made by Linuxfabrik

GitHub Stars License Version PyPI Python GitHub Issues OpenSSF Scorecard GitHubSponsors PayPal


FirewallFabrik

FirewallFabrik is a modern successor to Firewall Builder (fwbuilder), preserving its core design philosophy while updating it for current firewall technologies. It is a Qt-based GUI that manages firewall policies for multiple platforms, including iptables and nftables, from a single unified interface. All objects, rules, and device definitions are stored in a centralized policy database, allowing consistent reuse of services, networks, and rule sets. This architecture scales cleanly from a handful of devices to hundreds of firewalls, all managed from one policy file and one UI, with platform-specific configuration generated automatically.

This project was developed with the assistance of Claude Code by Anthropic.

Installation

Make sure to include the [gui] extra to pull in PySide6 for the graphical interface.

Using uv (recommended)

The recommended way to install FirewallFabrik. You can run it without a permanent install:

uvx --from 'firewallfabrik[gui]' fwf

Or install it as a tool:

uv tool install 'firewallfabrik[gui]'

Installing a Release Candidate

To test a pre-release version, either allow pre-releases or pin a specific RC version:

uvx --from 'firewallfabrik[gui]' --prerelease allow fwf
uv tool install 'firewallfabrik[gui]' --prerelease allow
uv tool install 'firewallfabrik[gui]==<version>' --prerelease allow

For the full installation guide (pipx, pip, development setup, native themes, desktop integration), see the User Guide: Installing FirewallFabrik.

Documentation

Full documentation is available at linuxfabrik.github.io/firewallfabrik. It is automatically built and deployed on every push to main.

Feedback from our Community

Some comments from the community about our successor to FirewallBuilder:

... Danke, das Du/Ihr FirewallFabrik ins Leben gerufen habt! Ich liebe FirewallBuilder und finde es wirklich ganz toll, ein Nachfolgeprodukt in FirewallFabrik gefunden zu haben. nftables-Unterstützung ist SUPER!

-- Klaus Tachtler

Thank you for this software, I loved FirewallBuilder, I imagine I'll love this one too.

-- David Mercereau

License

# Copyright (C) 2026 Linuxfabrik <info@linuxfabrik.ch>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# On Debian systems, the complete text of the GNU General Public License
# version 2 can be found in /usr/share/common-licenses/GPL-2.

# SPDX-License-Identifier: GPL-2.0-or-later

About

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.

Topics

Resources

License

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Sponsor this project

 

Packages

 
 
 

Contributors