Your company here, and a link to your site. Click to find out more.

foomuuri - Man Page

multizone bidirectional nftables firewall

Foomuuri is a firewall generator for nftables based on the concept of zones. It is suitable for all systems from personal machines to corporate firewalls, and supports advanced features such as a rich rule language, IPv4/IPv6 rule splitting, dynamic DNS lookups, a D-Bus API and FirewallD emulation for NetworkManager’s zone support.

Options

--help: display this help and exit
--verbose: verbose output
--version: output version information and exit
--set=option=value: set config option to value

Commands

start: load configuration files, generate new ruleset and load it to kernel
start-or-good: same as start but fallback to previous “good” ruleset if loading fails
stop: remove ruleset from kernel
reload: same as start, followed by resolve+iplist refresh
check: load configuration files and verify syntax
list: list active ruleset currently loaded to kernel
list zone-zone {zone-zone...}: list active ruleset for zone-zone currently loaded to kernel
list macro: list all known macros
list counter: list all named counters
iplist list: list entries in all configured iplists and resolves
iplist list name {name...}: list entries in named iplist/resolve
iplist add name {timeout} ipaddress {ipaddress...}: add or refresh IP address to iplist
iplist del name ipaddress {ipaddress...}: delete IP address from iplist
iplist refresh name {name...}: refresh iplist @name entries now