Netfilter is a packet filtering system within the Linux kernel used for intercepting and processing network packets. Iptables is a user-space program that relies on netfilter to implement stateless/stateful packet filtering for network firewalls, and address/port translation for NATs. There are many applications and tools that ease complex iptables management tasks with convenient graphical front-ends. Here are some of those iptables management tools with GUI.
Shorewall is one of the most powerful and flexible iptables configuration tool. Shorewall provides a high level abstraction of iptables rules, making it easy to manage complex firewall settings and edit iptables rules. While standalone Shorewall relies on plain-text configuration files to operate, there is a separate Webmin module for Shorewall with graphical front-ends.
Firestarter is an open-source graphical interface for netfilter and iptables. Besides standard firewall settings, Firestarter features a monitoring interface that reports firewall status (e.g., blocked connections and active connections being tracked) in real-time.
Firewall Builder (or fwbuilder) is an open-source GUI firewall configuration and management tool available for Linux, FreeBSD, MS Windows, and Mac OS X. Fwbuilder supports GUI-based configurations for iptables (Linux), ipfilter (FreeBSD), ipfw (FreeBSD/MacOS), as well as Cisco ASA/PIX firewalls, to generate firewall rulesets to be used on a target machine. It comes with a set of predefined firewall ruleset templates for commonly used firewall deployments.
Gufw (short for "GUI for Uncomplicated Firewall") is an easy-to-use GUI firewall manager for Debian/Ubuntu desktops. If all you need is simple firewall rules such as allowing/blocking ports for incoming/outgoing traffic, gufw will be probably sufficient for you.
Subscribe to Xmodulo
Do you want to receive Linux FAQs, detailed tutorials and tips published at Xmodulo? Enter your email address below, and we will deliver our Linux posts straight to your email box, for free. Delivery powered by Google Feedburner.
Did you find this tutorial helpful? Then please be generous and support Xmodulo!
Latest posts by Dan Nanni (see all)
- How to switch from NetworkManager to systemd-networkd on Linux - August 31, 2015
- How to set up a system status page of your infrastructure - August 25, 2015
- How to configure virtual hosts in Apache HTTP server - August 24, 2015