[Announce] Foomuuri - New firewall software using nftables

[Announce] Foomuuri - New firewall software using nftables

[Kim B. Heino]

Hi,

Foomuuri is a multizone bidirectional nftables firewall.

We have been developing Foomuuri firewall software for last four
months. It's already installed to ~50 different systems, from laptops
to servers to corporate router firewall.

Now we consider it as "stable" so it's time to annouce is more
publicly. It should fit most firewalls as is, only some advanced
features (like multi-ISP) are missing.

Source, documentation and release files are available at:

https://github.com/FoobarOy/foomuuri

Help wanted: All kind of ideas, testing, documentation, patches, etc
are welcome. For example, we use rpm packages ourself and deb packages
are only briefly tested.

Features:

- Firewall zones
- Bidirectional firewalling for incoming, outgoing and forwarding traffic
- Suitable for all systems from personal laptop to corporate firewalls
- Rich rule language for flexible and complex rules
- Predefined list of services for simple rule writing
- Rule language supports macros and templates
- IPv4 and IPv6 support with automatic rule splitting per protocol
- SNAT, DNAT and masquerading support
- Logging and counting
- Rate limiting
- DNS hostname lookup support with dynamic IP address refreshing
- IPsec matching support
- Ability to map certain traffic to separate zones
- D-Bus API
- FirewallD emulation for NetworkManager's zone support
- Raw nftables rules can be used
- Fresh design, written to use modern nftables's features

Sorry if this email is considered spam. I will not send it again.